top | item 22484562

(no title)

emcho | 6 years ago

To be accurate: no tool that relies on webrtc is end-to-end encrypted. So, no, it isn't. It is encrypted on the wire, just like the other tools mentioned here.

discuss

order

commoner|6 years ago

Are you saying that the developer's claims in this issue discussion are wrong?

https://github.com/nextcloud/spreed/issues/37

He says that video/audio in calls are end-to-end encrypted when the server is using the default PHP backend, but not the high-performance backend (an optional paid and proprietary enterprise upgrade).

> video/audio is already end-to-end encrypted

> By default with the internal signaling backend audio/video calls (no matter if 1:1 or group) are end-to-end encrypted.

> and without the HPB its always paar-to-peer [sic] and therefor end-to-end encrypted.

> Chat is currently not end-to-end encrypted, only the audio/video of calls are.

Someone mentioned Jitsi's statement and the developer responded:

>> But I don't understand why the Jitsi people write, "WebRTC today does not provide away of conducting multiparty conversations with end-to-end encryption." That would only be true if I decided to use an additional HPB solution, wouldn't it? But not out of the box.

> Exactly, I guess for better user experience and performance they have a SFU or MCU in place (our HPB is an SFU), and therefor it stops being end-to-end encrypted