What you need to know about Zoom encryption
Zoom gave its users a big security upgrade Monday when it rolled out end-to-end encryption for its online meetings network.
E2EE puts control of the keys for scrambling data in the hands of meeting organizers. Before the E2EE rollout, encryption was done on Zoom’s servers, where someone with access to those servers could intercept the data.
To use the new feature, customers must enable E2EE meetings at the account level and opt-in to E2EE on a per-meeting basis.
Without end-to-end encryption, there’s a possibility that someone with access to the platform could intercept conversations, explained Dan Nadir, chief product officer at Theta Lake, a security and compliance solutions provider for collaboration platforms in Santa Barbara, Calif.
In typical meetings, Zoom explained in a statement, its cloud meeting servers generates encryption keys for every meeting and distributes them to meeting participants using Zoom clients as they join.
With Zoom’s new E2EE, it continued, the meeting’s host generates encryption keys and uses public key cryptography to distribute these keys to the other meeting participants, who will also see the meeting leader’s security code that they can use to verify the secure connection. The host can read this code out loud, and all participants can check that their clients display the same code.