Zoom Misleads Users About End-to-End Encryption Claims

An investigation reveals that Zoom does not actually provide end-to-end encryption for video and audio, despite prominent marketing claims suggesting otherwise. Instead, the platform uses transport encryption, allowing the company itself to access unencrypted meeting content.

Zoom falsely markets its video conferencing service as having end-to-end encryption, a standard that typically prevents anyone outside of a conversation from accessing the content. As millions of people rely on the platform during the Covid-19 pandemic, Zoom's website, security white paper, and app interface all actively reinforce this misleading claim to build user trust.

In reality, Zoom uses transport encryption rather than true end-to-end encryption. This technical distinction means that Zoom itself maintains the ability to access unencrypted video and audio from meetings taking place on its servers, defeating the primary purpose of the security feature the company advertises.

The platform's green padlock icon, which displays a tooltip claiming an "end to end encrypted connection" when users hover over it, contributes significantly to the confusion. This deceptive marketing tactic gives users a false sense of privacy while they discuss sensitive personal and business matters during an unprecedented shift to remote work.

Read More at the original source →