Hacker News Reader

The article is quite direct: key directly sent to client in USA directly from a server in china. what is unclear?

Have read the whole article myself, I did not see that explicitly stated. Could you provide the quote?

> In addition, we identify potential areas of concern in Zoom’s infrastructure, including observing the transmission of meeting encryption keys through China.

Thanks! Indeed that was in their opener, but their clarifying statement is broader.

FTA "We suspect that keys may be distributed through these servers. A company primarily catering to North American clients that sometimes distributes encryption keys through servers in China is potentially concerning, given that Zoom may be legally obligated to disclose these keys to authorities in China."

"We suspect" is not the same as "we are certain".

They observed keys being transmitted to Chinese servers, which makes them to suspect that Zoom is distributing keys via these servers. They have worded this very carefully to avoid claiming something that they cannot confirm (distribution to multiple users).

Reply on news.ycombinator.com