Jitsi Meet Security and Privacy

Guess the difference is that Jitsi never says/says that the meetings are end-to-end encrypted. One of the questions on their page is "Are my meetings encrypted? Is encryption end-to-end?" but they never give a give a clear yes/no answer to the last question, instead they describe what they are doing (which is clearly not E2E encryption) and how it works.

But for a layperson who reads this without really knowing what E2E encryption is, won't get their answer by reading the answer, they'll finish reading with their own understanding if Jitsi supports E2E encryption or not.

I have done so on the smallest cheapest gcloud instance and it worked alright. Under a cent an hour for privacy seems worth it.

Then its still not end-to-end encrypted. The difference is that the only point where its no encrypted is under your control as well. So you're right that your meetings cannot be recorded if you host your own instance.

Unlike Zoom, Jitsi never claimed that their system was e2e encrypted which is a huge difference if you ask me. Apparently its a technical limitation of WebRTC, so I'd assume no webbrowser based solution can be e2e encrypted as of now. Which is ashame since the browser compatability makes meetings with people outside your company (or with less tech savy family members) so much easier.

edit: misunderstoot your point

You can self-host zoom: https://support.zoom.us/hc/en-us/articles/201363093-Deployin...

Zoom has signed HIPAA BAAs. I doubt they're jumping in on meetings when there's a risk of patient health history being discussed

And since Facetime is closed source, a claim is all we'll get.

Jami is peer-to-peer and supports end-to-end encryption. Not sure if that counts or if that means it uses full meshing.

Of course WebRTC is only a requirement if you want to be browser-based. And even then, some solutions use WebRTC data channels for video instead (e.g. Zoom's web version). They could do it, although you'd of course still be trusting the server to serve you the right thing.

Obviously - I was referring to when you have a SFU, such as Jitsi and comparable to zoom.

The concept of e2e encryption doesn’t even make sense in p2p, the fact that direct communication between two peers is “end to end encrypted” is self evident. It’s only when there is a central server that talking about e2e as a concept is relevant.