{"id":13243,"date":"2020-06-03T13:25:49","date_gmt":"2020-06-03T20:25:49","guid":{"rendered":"https:\/\/www.privateinternetaccess.com\/blog\/?p=13243"},"modified":"2020-08-26T14:54:49","modified_gmt":"2020-08-26T21:54:49","slug":"to-work-together-with-law-enforcement-zoom-wont-provide-end-to-end-encryption-for-free-users","status":"publish","type":"post","link":"https:\/\/www.privateinternetaccess.com\/blog\/to-work-together-with-law-enforcement-zoom-wont-provide-end-to-end-encryption-for-free-users\/","title":{"rendered":"To work together with law enforcement, Zoom won’t provide end-to-end encryption for free users"},"content":{"rendered":"

Zoom CEO Eric Yuan has admitted that he won\u2019t provide end-to-end encryption to free users in favor of being able to work with law enforcement. It has previously been discussed in Zoom\u2019s announced move towards privacy and security that true end-to-end encryption would only be available for paid customers; however, at the time tech pundits hoped that Zoom\u2019s move was merely for tier differentiation. Reuters<\/a> reported as recently as last week that end-to-end encryption would only be available for paying business and enterprise users.\u00a0 Now, from the horse\u2019s mouth itself, we see what Zoom\u2019s real priorities are. On their Q1 earnings call, Zoom CEO Eric Yuan<\/a> commented:<\/p>\n

\u201cWe want to give [end-to-end encryption] to at least the enterprise customer or business customer. Free users, for sure, we don\u2019t want to give that. Because we also want to work together, say, with FBI, with local law enforcement in case some people that use Zoom for a bad purpose, right?\u201d<\/p><\/blockquote>\n

Zoom only plans to offer end-to-end encryption for users it can identify<\/h2>\n

While it is true that any company providing communications services might end up needing to work with law enforcement at some point, history and established laws have shown that it is perfectly fine to inform law enforcement that end-to-end encryption means they won\u2019t be able to see the contents of a video call, iMessage, or other digital communication. That\u2019s how encryption is supposed to work. Instead, Zoom is planning to only offer end-to-end encryption to paying customers who can be identified \u2013 perhaps as a way to pass on potential liability in case a paying customer uses Zoom for a bad purpose.<\/p>\n

A Zoom spokesperson told CNBC via email on Wednesday:<\/p>\n

\u201cZoom\u2019s end-to-end encryption plan balances the privacy of its users with the safety of vulnerable groups, including children and potential victims of hate crimes. We plan to provide end-to-end encryption to users for whom we can verify identity, thereby limiting harm to these vulnerable groups. Free users sign up with an email address, which does not provide enough information to verify identity.\u201d<\/p><\/blockquote>\n

A security consultant with Zoom clarified more on what led Zoom to this decision in a Twitter thread \u2013 saying that to offer end-to-end encryption, Zoom has to make such sacrifices. He noted that schools on a free (comped) plan would have e2e encryption.<\/p>\n

\n

Some facts on Zoom's current plans for E2E encryption, which are complicated by the product requirements for an enterprise conferencing product and some legitimate safety issues.<\/p>\n

The E2E design is available here:https:\/\/t.co\/beLdeAwMSM<\/a><\/p>\n

\u2014 Alex Stamos (@alexstamos) June 3, 2020<\/a><\/p><\/blockquote>\n