Announced on Monday, a settlement between video conferencing app Zoom and the FTC revealed that since 2016, Zoom had been mendacity about offering ‘end-to-end, 256-bit encryption’ to guard the safety of customers’ communication. The fact was that Zoom was really giving customers a decrease stage of safety. As the FTC mentioned on Monday, “Zoom maintained the cryptographic keys that could allow Zoom to access the content of its customers’ meetings, and secured its Zoom Meetings, in part, with a lower level of encryption than promised.”
Zoom, FTC attain settlement after Zoom is caught in a giant lie over encryption
But as the FTC notes, “Zoom did not provide end-to-end encryption for any Zoom Meeting that was conducted outside of Zoom’s Connector product. On a blog post written by Zoom’s Chief Product Officer, the company finally admitted that “whereas we by no means meant to deceive any of our prospects, we acknowledge that there is a discrepancy between the generally accepted definition of end-to-end encryption and how we have been using it.” The FTC also noted that the claim made last year by Zoom that its recorded meetings were stored encrypted as soon as the Meeting was over simply was not true. As it turns out, recorded Meetings were kept in Zoom’s own server unencrypted for up to 60 days before they were transferred to Zoom’s secure cloud storage where they were stored encrypted.
The Democrats on the FTC panel are not happy about the settlement since they feel that it does not punish Zoom enough for its lies. Democratic Commissioner Rebecca Kelly Slaughter said, “Zoom is not required to supply redress, refunds, and even discover to its prospects that materials claims concerning the safety of its providers have been false. This failure of the proposed settlement does a disservice to Zoom’s prospects, and considerably limits the deterrence worth of the case.” However, Zoom does face lawsuits from prospects and traders and these might end in the firm being ordered to make monetary restitution to those that have been damage by the agency’s dishonesty.
The proposed settlement that Zoom has agreed to contains beefing up its safety together with the use of multi-factor authentication as a strategy to forestall unauthorized entry to the Zoom community. The settlement is open for the public to touch upon it for 30 days; as soon as that point is up, the Commission will get to vote on making it last. The 30 days begins as soon as the settlement is printed in the Federal Register. Zoom must notify the FTC if there are any knowledge breaches. All software program updates will should be examined by Zoom for any safety flaws. And a third-party might want to sign-off on Zoom’s safety program as soon as the settlement is finalized and for each two years after that for a complete of 20 years.
samanvya 
PreetiJha 
Asad