element-hq / element-hq/element-android

CLARIFY via pop-up SECURITY WARNING anytime it's possible that Audio Video may NOT be E2EE encrypted via JITSI or other providers

Open
#6,019 0 comments 0 reactions 0 assignees View on GitHub
A-VoIP T-Enhancement X-Needs-Product
Dominant language
Kotlin
Stars
3.7k
Forks
917
PR merge metrics
No merged PRs in 30d

Description

### Your use case

#### What would you like to do?
Have Element Android WARN if there's possibility (perhaps depending on Jitsi Server used), that the AUDIO or VIDEO conference in a ROOM with multiple users "might" not necessarily be E2EE encrypted, ie end to end encrypted.

#### Why would you like to do it?
It would be terrible if Element Android "claimed" full E2EE encryption if in reality that was not true all the time and gave people a FALSE sense of security, when in fact perhaps their Audio/Video conference could have been "RECORDED" by the Jitsi server they were using.

#### How would you like to achieve it?
The project maintainers should clearly "warn" if Audio/Video streams might not be E2EE in rooms with multi users using Jitsi.

### Have you considered any alternatives?

Yea, hunt through the element code and hard-code my own Jitsi server? But since JITSI MEET has been supporting E2EE I think for some time now and likely has better servers and bandwidth, I'd rather use their servers if it is CONFIRMED that indeed all streams are E2EE encrypted, even mult-user video/audio conferencing in rooms which use Jitsi.

Where can one change the address/URL of the jitsi server to use?

### Additional context

I've run my own JITSI server before, but there was no E2EE support at the time, and I could easily RECORD Audio/Video of the any conference hosted by the server. Hopefully Element for Android now uses a newer Jitsi that supports E2EE end to end encryption?

If not, that would be terrible because I didn't get any "WARNING", so it should be fixed asap if somehow E2EE does not happen for multi user Audio/Video with 3-users or more in a room, since Element advertises itself as fully E2EE so hopefully it does E2EE and someone can simply show me how I can confirm that. I am using Element for android version 1.4.16-dev from github that I built.

But I'm having trouble finding in the app any Jitsi related settings, such as server etc. If its hard-coded then consider this also a feature request to make it user editable. But mainly to make sure we WARN when starting 3+ Audio/Video if there's any chance the session might NOT be fully E2EE and there's technical possibility of RECORDING by the server.

And again apologies if this has been addressed before and Element will "always" ONLY send fully E2EE streams, in that case please point me to the clarification of this and close this ticket. thx!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.