With the recent Zoom 5.0 release, Zoom clients now support encrypting audio, video, chat, and screen sharing content using industry-standard 256-bit AES-GCM.
It is not decrypted until it reaches the recipients’ devices. Today, audio and video content flowing between Zoom clients (e.g., Zoom Rooms, laptop computers, and smartphones running the Zoom app) is encrypted at each sending client device. Keybase’s experienced team will be a critical part of this mission. Our goal is to provide the most privacy possible for every use case, while also balancing the needs of our users and our commitment to preventing harmful behavior on our platform. This acquisition marks a key step for Zoom as we attempt to accomplish the creation of a truly private video communications platform that can scale to hundreds of millions of participants, while also having the flexibility to support Zoom’s wide variety of uses. We are excited to integrate Keybase’s team into the Zoom family to help us build end-to-end encryption that can reach current Zoom scalability. Since its launch in 2014, Keybase’s team of exceptional engineers has built a secure messaging and file-sharing service leveraging their deep encryption and security expertise. Stay tuned, and stay safe out there.We are proud to announce the acquisition of Keybase, another milestone in Zoom’s 90-day plan to further strengthen the security of our video communications platform. The CLDC Digital Security team continues to explore alternatives and we’ll keep you posted on Keybase itself and promising alternatives.
#Keybase teams plus#
In the best case, Keybase’s priorities take root at Zoom (strong, verifiable encryption, open-source development), and Zoom provides an open-source client that does everything Keybase does plus end-to-end encrypted web conferencing.Īccording to Zoom, within two weeks (Friday May 22, 2020) a new “detailed draft cryptographic design” will be released as the basis for consultations with experts and civil society to refine their approach. Zoom may adopt some Keybase features (end-to-end encrypted team messaging), but only make it available to giant corps with giant budgets. We don’t expect this would happen within a year. In the worst case, Keybase stops being developed and becomes no longer available. In fact, what makes Keybase particularly strong is its emphasis on precluding attacks by the Keybase team itself*, and that is still true.īut, in the long-term, what are the best-possible and worst-possible outcomes?
#Keybase teams update#
In the short-term, the Keybase servers are still up and running, the app is still available (with a major update promised soon), and it still uses robust, open-source crypto. The first thing we need to emphasize: now is not the time to jump ship and delete your Keybase account. And they did it by buying possibly the best secure messaging app out there-Keybase-plus the Keybase team and all of its assets. This put huge pressure on Zoom to up their security game. Then the Intercept and CitizenLab pointed out that Zoom’s crypto is terrible (and we have been pointing this out for years). Thanks, coronavirus! The story so far: Zoom became very, very popular in a very, very short time after stay-at-home orders sent companies, universities, doctor’s appointments, yoga classes, and everything else to Zoom for video conferencing services. “I bet that wasn’t in your threat model.” So the future of Keybase, perhaps CLDC’s most capable and secure recommendation for dissident organizers, is now in doubt, because of COVID-19.
0 kommentar(er)
