Hacker News new | ask | show | jobs
by f38zf5vdt 2268 days ago
> For those who want additional control of their keys, an on-premise solution exists today for the entire meeting infrastructure, and a solution will be available later this year to allow organizations to leverage Zoom’s cloud infrastructure but host the key management system within their environment. Additionally, enterprise customers have the option to run certain versions of our connectors within their own data centers if they would like to manage the decryption and translation process themselves.

So... privacy is a premium feature requiring you to self-host? Why not just run jitsi for free?
1 comments
swixmix 2268 days ago
Doesn't Jitsi have the same problem? The solution is the same: Run your own server. End to end encrypted videoconferencing does not scale easily without a server.

> Is Jitsi Meet end-to-end encrypted? #409

> ... "yes, https://meet.jit.si/ encrypts the communication, only the two clients and our server has access to them". ... [1]

[1]: https://github.com/jitsi/jitsi-meet/issues/409

link
ahendriksen 2268 days ago
To me, this quote gave the impression that Jitsi developers similarly (and falsely) claim that it is end-to-end encrypted:

> Is Jitsi Meet end-to-end encrypted? #409

> ... "yes, https://meet.jit.si/ encrypts the communication, only the two clients and our server has access to them". ... [1]

In fact, "yes, .. " is an answer to the question "is it reasonable to use Jitsi Meet from an untrusted wifi network?". It was written by a user of Jitsi and not one of the developers.

A developer answers "when talking on meet.jit.si your stream is encrypted on the network but decrypted on the machine that hosts the bridge."

link
f38zf5vdt 2268 days ago
Yes... but in one case the software is entirely FOSS and readily deployable via a docker image. The Zoom server is not FOSS, or even accessible through their GitHub.

https://github.com/jitsi/docker-jitsi-meet

link
swixmix 2268 days ago
Right. Let's assume I refuse to take on the responsibility of a videoconferencing server. What are my options to get Jitsi Meet? Can I pay a company to set up and maintain it? Or do I have to hunt for a videoconferencing engineer?
link
f38zf5vdt 2268 days ago
It's free if you use their servers (https://meet.jit.si/), but then you're back to square one in that you don't own the encryption keys.

Scaleway shows how easy it is to configure and deploy on a cloud host:

https://www.scaleway.com/en/docs/deploy-jitsi-meet-with-dock...

Whether or not your cloud hosting is secure is a separate issue altogether. :)

I'm not saying that it's E2EE on Jitsi either, but at least the implementation is transparent.

link