end-to-end encryption

Question

end-to-end encryption

akshaykmr opened this issue 4 years ago · 1 comments

Currently, connections are authenticated, and data-packets are relayed by the web-socket server over TLS. Some users requested that they'd be more at ease with e2e-encryption in place. I think this is a solid feature to have.

Should be fairly easy to do with a symmetric cypher, using AES. The key can be included in the room secret link as a fragment. These are not sent over HTTP Request Messages, therefore only room-participants will be able to communicate among one another (even if you knew the room-id).

Need to figure out UI and messaging in case of incorrect keys and rooms that already exist.

Answer 1 · 2020-09-09T05:59:32.000Z

We're now e2ee with 1.2.12 onwards. Not only terminal streams but chat, diagrams, code or any content-data from collaborative apps is now end-to-end encrypted with 128-bit AES.