La end-to-end encryption di Zoom ha fatto diversi passi avanti e indietro, incluso quello di renderla disponibile solo agli abbonati. L'ultimo è questo: disponibile per tutti, anche gli utenti non registrati, a condizione che non siano anonimi: devono fornire dati personali atti a reindentificarli, come il numero di telefono. La ragione fornita è "to reduce the mass creation of abusive accounts", ma immagino sia anche perché almeno i metadati siano attribuibili a soggetti identificabili (e il n. di telefono è il tipico "selector") Per alcuni non è esclusa la possibilità è che Zoom sia costretto a conservare le chiavi per poterle consegnare a richiesta, stile Hushmail (<https://www.wired.com/2007/11/encrypted-e-mai/>). Sempre che queste non siano già disponibili, come già sospettato ad inizio aprile <https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at...>. In ogni caso, software proprietario... caveat emptor. Alberto Il post nel blog di Zoom è qui: <https://blog.zoom.us/wordpress/2020/06/17/end-to-end-encryption-update/> Since releasing the draft design of Zoom’s end-to-end encryption (E2EE) on May 22, we have engaged with civil liberties organizations, our CISO council, child safety advocates, encryption experts, government representatives, our own users, and others to gather their feedback on this feature. We have also explored new technologies to enable us to offer E2EE to all tiers of users. Today, Zoom released an updated E2EE design on GitHub. We are also pleased to share that we have identified a path forward that balances the legitimate right of all users to privacy and the safety of users on our platform. This will enable us to offer E2EE as an advanced add-on feature for all of our users around the globe – free and paid – while maintaining the ability to prevent and fight abuse on our platform. To make this possible, Free/Basic users seeking access to E2EE will participate in a one-time process that will prompt the user for additional pieces of information, such as verifying a phone number via a text message. Many leading companies perform similar steps on account creation to reduce the mass creation of abusive accounts. We are confident that by implementing risk-based authentication, in combination with our current mix of tools — including our Report a User function — we can continue to prevent and fight abuse. [...]