[jitsi-dev] Security Problem With Video Chat


#1

This is a serious potential problem I have discovered with ZRTP and video
chat. If two people are connected and chatting through XMPP and go to ZRTP
encryption. Once someone goes to video chat with encryption the system is
fine until the original video chat person stops video chat. At this point
ZRTP encryption will turn off for about 30 seconds. If both people are not
paying attention they could be leaking sensitive information during this
time.

Thanks


#2

Please make sure that its not just a graphical glitch by looking at
the call information (the i symbol).
As long as you are not really sure that its an issue with jitsi this
mail would belong into the user list

- --
Yannik V�lker

···

On 27.05.2013 18:42, Jonathan Brown wrote:

This is a serious potential problem I have discovered with ZRTP
and video chat. If two people are connected and chatting through
XMPP and go to ZRTP encryption. Once someone goes to video chat
with encryption the system is fine until the original video chat
person stops video chat. At this point ZRTP encryption will turn
off for about 30 seconds. If both people are not paying attention
they could be leaking sensitive information during this time.