{"id":34212,"date":"2020-04-03T23:11:41","date_gmt":"2020-04-03T23:11:41","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/"},"modified":"2020-04-03T23:11:41","modified_gmt":"2020-04-03T23:11:41","slug":"not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/","title":{"rendered":"Not only is Zoom&#8217;s strong end-to-end encryption not actually end-to-end, its encryption isn&#8217;t even that strong"},"content":{"rendered":"<p><strong class=\"trailer\">Updated<\/strong> Zoom has faced increased scrutiny and criticism as its usage soared from 10 million users a day to 200 million in a matter of months, all thanks to coronavirus pandemic lockdowns.<\/p>\n<p>Cybersecurity research group Citizen Lab is among those turning the spotlight on the video-conferencing app maker, and on Friday, it published a damning dossier on the state of the software.<\/p>\n<p>The report questions the security of Zoom&#8217;s technical infrastructure, claiming the upstart&#8217;s network architecture makes it susceptible to pressure for data demands from Chinese authorities.<\/p>\n<p>Zoom in its documentation, and in an in-app display message, has claimed its conferencing service is &#8220;end-to-end encrypted,&#8221; meaning that an intermediary, include Zoom itself, cannot intercept and decrypt users&#8217; communications as it moves between the sender and receiver.<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2020\/03\/31\/boris_shutterstock.jpg?x=174&amp;y=115&amp;crop=1\" width=\"174\" height=\"115\" alt=\"boris\"><\/p>\n<h2 title=\"Super-crypto actually normal TLS, lawsuit launched over Facebook API usage, privacy policy rewritten\">Zoom&#8217;s end-to-end encryption isn&#8217;t actually end-to-end at all. Good thing the PM isn&#8217;t using it for Cabinet calls. Oh, for f&#8230;<\/h2>\n<p><a href=\"https:\/\/www.theregister.co.uk\/2020\/04\/01\/zoom_spotlight\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>When reports emerged that Zoom Meetings are <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/www.theregister.co.uk\/2020\/04\/01\/zoom_spotlight\/\">not actually end-to-end encrypted encrypted<\/a>, Zoom responded that it wasn&#8217;t using the commonly accepted definition of the term.<\/p>\n<p>&#8220;While we never intended to deceive any of our customers, we recognize that there is a discrepancy between the commonly accepted definition of end-to-end encryption and how we were using it,&#8221; the company said in a <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/blog.zoom.us\/wordpress\/2020\/04\/01\/facts-around-zoom-encryption-for-meetings-webinars\/\">blog post<\/a>.<\/p>\n<p>Citizen Lab says it undertook its analysis to clarify conflicting and misleading claims about Zoom&#8217;s security because so many businesses, governments, civil society, and healthcare organizations have chosen to use Zoom&#8217;s technology \u2013 not to mention the <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2020\/04\/01\/zoom_spotlight\/\" rel=\"noopener noreferrer\">British cabinet<\/a>. According to the company, more than 200 million meeting participants used the service in March.<\/p>\n<p>The Zoom transport protocol, according to <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/citizenlab.ca\/2020\/04\/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings\/\">the lab&#8217;s report<\/a>, is a custom variant of RTP that encrypts and decrypts the audio and video of Zoom meeting participants with a single AES-128 key that gets shared among all those in the meeting via a TLS-encrypted channel.<\/p>\n<p>&#8220;Zoom\u2019s encryption and decryption use AES in ECB mode, which is well-understood to be a bad idea, because this mode of encryption preserves patterns in the input,&#8221; the report says.<\/p>\n<div class=\"CaptionedImage Center\" readability=\"8\"><a href=\"https:\/\/regmedia.co.uk\/2020\/04\/03\/handout_citizen_lab_zoom_aes_ecb2.jpg\" target=\"_blank\" rel=\"noopener noreferrer\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2020\/04\/03\/handout_citizen_lab_zoom_aes_ecb2.jpg?x=648&amp;y=390&amp;infer_y=1\" alt=\"A visual demonstration that AES ECB encryption is bad for images\" title=\"A visual demonstration that AES ECB encryption is bad for images\" height=\"390\" width=\"648\"><\/a><\/p>\n<p class=\"text_center\">Citizen Lab&#8217;s visual demonstration that using AES-ECB to encrypt images shared via a Zoom call &#8230; Click to enlarge<\/p>\n<\/div>\n<p>For streaming media, the SRTP standard should be used in Segmented Integer Counter Mode or f8-mode, according to Citizen Lab. The consequence of not doing so is that an image encrypted using Zoom&#8217;s chosen method is still visible.<\/p>\n<p>What&#8217;s more, during test calls between two participants in North America, the researchers observed meeting keys being sent via servers in Beijing, China.<\/p>\n<p>&#8220;An app with easily-identifiable limitations in cryptography, security issues, and offshore servers located in China which handle meeting keys presents a clear target to reasonably well-resourced nation state attackers, including the People\u2019s Republic of China,&#8221; the report says.<\/p>\n<p>Other security researchers have raised concern about Zoom&#8217;s technical infrastructure. Dan Ehrlich of Twelve Security, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/twitter.com\/TwelveSecurity\/status\/1245409899133222913?s=20\">mapped out<\/a> more than 130,000 subdomains associated with Zoom.us. Many of these, he said, include a number of terms like &#8220;face,&#8221; &#8220;tracking,&#8221; and &#8220;live,&#8221; &#8220;reporting,&#8221; and &#8220;tracking&#8221; that should raise questions among users of the software concerned with privacy.<\/p>\n<p>Ehrlich on Friday published <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/blog.12security.com\/zoom-and-some-china-stuff\/\">a post<\/a> pointing to Zoom&#8217;s ties to universities linked to military hacking activity.<\/p>\n<p>Citizen Lab&#8217;s findings add to other concerns about the security of the company&#8217;s software and its ability to keep customer data safe.<\/p>\n<p>&#8220;As a result of these troubling security issues, we discourage the use of Zoom at this time for use cases that require strong privacy and confidentiality,&#8221; the report says.<\/p>\n<p><em>The Register<\/em> asked Zoom to comment but we&#8217;ve not heard back. Earlier this week, Zoom CEO Eric S. Yuan <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/blog.zoom.us\/wordpress\/2020\/04\/01\/a-message-to-our-users\/\">pledged<\/a> to deal with the app&#8217;s security problems.<\/p>\n<p>For the past week, Zoom has been on the defensive about the security and data practices of its video conferencing app. The company, for instance, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/blog.zoom.us\/wordpress\/2020\/03\/27\/zoom-use-of-facebook-sdk-in-ios-client\/\">removed the Facebook SDK<\/a> from its iOS app following reports that the app was sending analytics data to Facebook even for users without Facebook accounts.<\/p>\n<p>On Friday, The Washington Post <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/www.washingtonpost.com\/technology\/2020\/04\/03\/thousands-zoom-video-calls-left-exposed-open-web\/\">reported<\/a> that thousands of personal Zoom videos can be viewed by anyone on the web because the company&#8217;s file naming scheme is predictable.<\/p>\n<p>Security biz Check Point documented how easy it is to guess Zoom Meeting IDs last year. Now with the global coronavirus health crisis forcing people to participant in video meetings, these IDs don&#8217;t even need to be guessed \u2013 people post them publicly, making them discoverable through online searches. The result has been trolls intruding on people&#8217;s online meetings, a practice that&#8217;s come to be known as &#8220;zoombombing.&#8221;<\/p>\n<p>Also on Friday, Zoom <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/status.zoom.us\/#past-incidents\">said<\/a> it &#8220;will be placing the Web Client into maintenance mode and take this part of the service offline.&#8221; Those who would use the service must now download and install Zoom&#8217;s software, known for its dubious use of a <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/twitter.com\/c1truz_\/status\/1244737672930824193?s=20\">pre-installation script<\/a>. The company has not said how long the web client maintenance will last or why it chose to remove its web app. \u00ae<\/p>\n<h3 class=\"crosshead\"><span>Updated to add<\/span><\/h3>\n<p>Zoom <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/blog.zoom.us\/wordpress\/2020\/04\/03\/response-to-research-from-university-of-torontos-citizen-lab\/\">claims<\/a> it routed encryption keys via China because it accidentally added Chinese servers to a list of backend systems intended to be used by non-Chinese users.<\/p>\n<p>Thus, when Zoom applications, being used by folks in America, consulted the list to find a server to connect to, the apps picked machines in China rather than machines outside China. Interesting that Zoom splits its platform into China and non-China&#8230;<\/p>\n<p class=\"wptl btm\"><span>Sponsored:<\/span> <a href=\"https:\/\/go.theregister.co.uk\/tl\/1925\/-8451\/build-the-next-generation-of-your-business-in-the-public-cloud?td=wptl1925\">Webcast: Build the next generation of your business in the public cloud<\/a><\/p>\n<p>READ MORE <a href=\"https:\/\/go.theregister.co.uk\/feed\/www.theregister.co.uk\/2020\/04\/03\/dont_use_zoom_if_privacy\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Video calls also routed through China, probe discovers Updated\u00a0 Zoom has faced increased scrutiny and criticism as its usage soared from 10 million users a day to 200 million in a matter of months, all thanks to coronavirus pandemic lockdowns.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":34213,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-34212","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Not only is Zoom&#039;s strong end-to-end encryption not actually end-to-end, its encryption isn&#039;t even that strong 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Not only is Zoom&#039;s strong end-to-end encryption not actually end-to-end, its encryption isn&#039;t even that strong 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-03T23:11:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Not only is Zoom&#8217;s strong end-to-end encryption not actually end-to-end, its encryption isn&#8217;t even that strong\",\"datePublished\":\"2020-04-03T23:11:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/\"},\"wordCount\":946,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/\",\"name\":\"Not only is Zoom's strong end-to-end encryption not actually end-to-end, its encryption isn't even that strong 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg\",\"datePublished\":\"2020-04-03T23:11:41+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Not only is Zoom&#8217;s strong end-to-end encryption not actually end-to-end, its encryption isn&#8217;t even that strong\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Not only is Zoom's strong end-to-end encryption not actually end-to-end, its encryption isn't even that strong 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/","og_locale":"en_US","og_type":"article","og_title":"Not only is Zoom's strong end-to-end encryption not actually end-to-end, its encryption isn't even that strong 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-04-03T23:11:41+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Not only is Zoom&#8217;s strong end-to-end encryption not actually end-to-end, its encryption isn&#8217;t even that strong","datePublished":"2020-04-03T23:11:41+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/"},"wordCount":946,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/","url":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/","name":"Not only is Zoom's strong end-to-end encryption not actually end-to-end, its encryption isn't even that strong 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg","datePublished":"2020-04-03T23:11:41+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/not-only-is-zooms-strong-end-to-end-encryption-not-actually-end-to-end-its-encryption-isnt-even-that-strong\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Not only is Zoom&#8217;s strong end-to-end encryption not actually end-to-end, its encryption isn&#8217;t even that strong"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=34212"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34212\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/34213"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=34212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=34212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=34212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}