[Phys-L] Zoom's end-to-end encryption isn't

[John Denker <jsd@av8n.com>]

Paraphrasing Peter Fairbrother via the cryptography listserv:

> Zoom isn't actually end-to-end at all.
> Good thing the PM isn't using it for Cabinet calls. Oh, for f..."
>
> https://www.theregister.co.uk/2020/04/01/zoom_spotlight/
>
> tldr:
>
> not end-to-end despite explicit claim
> mines all your data
> tracker-friendly
> sends data to facebook
> big login hole
> host can detect if watchers present
> all your base are belong to us

My recommendation at this point:
++ Probably OK for routine tele-teaching.
-- *NOT* for conferencing with your physician.
-- *NOT* for conferencing with your lawyer.
-- *NOT* for organizing your political party,
 unless you want to be this year's John Podesta.

I don't know what to use for high-security applications.
Let me work on it.