Private Calling at WhatsApp
summary
WhatsApp builds private calling for 2 billion users handling 15 billion minutes a day using a client-centric architecture that keeps call state on clients and keeps signal servers stateless with no PII. 1:1 calls use SRTP with a per-call master secret exchanged over an E2EE Signal‑like channel and per-device secrets for multi‑device isolation. P2P is used when safe; strangers force relays. Group calls use SFUs, a centralized transient state to resolve conflicts, and session key rotation with a SFU + session key rotation generator to rekey on membership changes for scalability and privacy.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 0:54Understanding Privacy
- 4:19Private OnetoOne Call
- 9:47Challenges
- 14:02Group Call
- 17:52Recap
related talks
19mBuilding private products
24mWhatsApp with privacy? Privacy issues with IM E2EE in the Multi-device setting
16mRelay Infrastructure at WhatsApp Scale
20mWhat's Up WhatsApp? - Two Years After the Big Deal
03mHighlights - Whats up WhatsApp? 2 Years After
23mWhatsApp Private Processing
14mBest practices from billions of calls
01h 07mBuilding Rock-Solid Encrypted Applications
