Hacker News new | ask | show | jobs
by boogies 2188 days ago
I don't think any of them do, but more relevant to security none of them has auditable source code. Jitsi Meet (the easiest to use out of the services I've tried, namely Zoom and Google Meet) has experimental E2EE. But if you want real security you probably want something more like GNU Jami, which is not grandma-friendly easy to use and is a native application only.
1 comments
neodymiumphish 2188 days ago
The beauty of Jitsi is that you can run the software yourself (especially with the free Google Cloud credit) and then the E2E is hardly relevant because it's still server-to-client encrypted and you own the server...
link
hunter2_ 2188 days ago
Good point. Are there any use cases for E2E when the server isn't potentially adversarial to any clients?

Separately: affordable servers likely are accessible to infrastructure providers (whether a VPS, or bare metal at a colo, etc.) so it's tough to say that "my own server" is usable exclusively by me and therefore not adversarial. Plus, maybe people want to use my server and consider me adversarial for whatever reason; they should use their own server instead, but might not have the skills.

link
Shared404 2188 days ago
My understanding is that Jitsi does actually have E2E at this point, at least in an experimental form.

It's in here somewhere: https://jitsi.org/security/

link