Zoom to roll out end-to-end encryption starting next week.
Video meeting app Zoom is all set to roll out the first phase of its end-to-end encryption (E2EE) offering from next week, initially as a technical preview for a month during which the platform will solicit feedback from users. Bot free and paid Zoom users around the world can host up to 200 participants in an end-to-end encryption meeting on the platform, Zoom said on Wednesday during its Zoomtopia 2020 event.
"End-to-end encryption is another stride toward making Zoom the most secure communications platform in the world," said Zoom CEO Eric Yuan. "This phase of our E2EE offering provides the same security as existing end-to-end-encrypted messaging platforms, but with the video quality and scale that has made Zoom the communications solution of choice for hundreds of millions of people and the world's largest enterprises."
Zoom first announced its plans to build an end-to-end-encrypted meeting option into its platform in May. The US-based company had said that since releasing the draft design of the platform's end-to-end encryption on May 22, it has engaged with civil liberties organisations, child safety advocates, encryption experts, government representatives, its own users, and others to gather their feedback on this feature.
Zoom was earlier sued by one of its shareholders who alleged in the complaint that the platform failed to disclose some vulnerabilities and that the services did not provide end-to-end encryption. "We're pleased to roll out Phase 1 of 4 of our E2EE offering, which provides robust protections to help prevent the interception of decryption keys that could be used to monitor meeting content," Max Krohn, Zoom's Head of Security Engineering, wrote in a blog post on Wednesday.
"To be clear, Zoom's E2EE uses the same powerful GCM (Galois/Counter Mode) encryption you get now in a Zoom meeting. The only difference is where those encryption keys live," Krohn said. To use the new security feature, customers must enable E2EE meetings at the account level and opt-in to E2EE on a per-meeting basis.
