Hacker News Reader

Comment by swixmix | Hacker News Reader

Doesn't Jitsi have the same problem? The solution is the same: Run your own server. End to end encrypted videoconferencing does not scale easily without a server.

> Is Jitsi Meet end-to-end encrypted? #409

> ... "yes, https://meet.jit.si/ encrypts the communication, only the two clients and our server has access to them". ... [1]

[1]: https://github.com/jitsi/jitsi-meet/issues/409

View on HN

To me, this quote gave the impression that Jitsi developers similarly (and falsely) claim that it is end-to-end encrypted:

> Is Jitsi Meet end-to-end encrypted? #409

> ... "yes, https://meet.jit.si/ encrypts the communication, only the two clients and our server has access to them". ... [1]

In fact, "yes, .. " is an answer to the question "is it reasonable to use Jitsi Meet from an untrusted wifi network?". It was written by a user of Jitsi and not one of the developers.

A developer answers "when talking on meet.jit.si your stream is encrypted on the network but decrypted on the machine that hosts the bridge."

Yes... but in one case the software is entirely FOSS and readily deployable via a docker image. The Zoom server is not FOSS, or even accessible through their GitHub.

https://github.com/jitsi/docker-jitsi-meet

Right. Let's assume I refuse to take on the responsibility of a videoconferencing server. What are my options to get Jitsi Meet? Can I pay a company to set up and maintain it? Or do I have to hunt for a videoconferencing engineer?

It's free if you use their servers (https://meet.jit.si/), but then you're back to square one in that you don't own the encryption keys.

Scaleway shows how easy it is to configure and deploy on a cloud host:

https://www.scaleway.com/en/docs/deploy-jitsi-meet-with-dock...

Whether or not your cloud hosting is secure is a separate issue altogether. :)

I'm not saying that it's E2EE on Jitsi either, but at least the implementation is transparent.

Reply on news.ycombinator.com