How Can We Help?
Zoom
Update (14/10/2020) Zoom has launched its end-to-end encryption (E2EE) offering as a technical preview. MyClinic365 has signed up for this preview ensuring that all video consultations are now use this E2EE offering.
How does Zoom provide end-to-end encryption?
Zoom’s E2EE offering uses public key cryptography. In short, the keys for each Zoom meeting are generated by participants’ machines, not by Zoom’s servers. Encrypted data relayed through Zoom’s servers is indecipherable by Zoom, since Zoom’s servers do not have the necessary decryption key. This key management strategy is similar to that used by most end-to-end encrypted messaging platforms today.
https://blog.zoom.us/us/zoom-rolling-out-end-to-end-encryption-offering/
Attention (28/04/2020): Zoom has launched Zoom 5.0 which includes among other changes significant changes to their encryption. Please ensure all your zoom clients have been updated to V5.0 before the 30th of May, see below for more details:
https://blog.zoom.us/wordpress/2020/04/27/its-here-5-things-to-know-about-zoom-5-0/
At MyClinic365 we use Zoom for Healthcare to provide our telehealth services such as Video. Zoom sets the industry standard for telehealth globally providing a reliable, secure and consistent clinical experience. Zoom remains the industry leader in video conferencing.
MyClinic365 has full trust in Zoom as a platform. The following settings are enabled by MyClinic365 by default:
- No meetings are recorded
- All meetings are protected by a password
- Meetings are encrypted
- Unique meeting IDs generated
- GDPR compliant – see below privacy statement
- Meetings have virtual waiting room enabled and participants must be manually admitted into meeting.
- Ability to lock Meeting
This article is a rational unbiased summary of reported Zoom issues written by a team of well respected ethical hackers in the Cyber community. It is well worth a read and answers a lot of questions. It also goes as far as questioning other telehealth solutions that have not come under the same level of scrutiny which is an extremely important observation. It is very easy for platforms to say they are secure when they have published no white papers or any details of their security or infrastructure. Zoom are the No1 global provider of teleconferencing solutions for a reason.
https://medium.com/@0xamit/zoom-isnt-malware-ae01618e2046
https://medium.com/mediation-resource/zoom-isnt-that-scary-a4b3dfe9b546
https://medium.com/@rowantrollope/beyond-the-noise-7-reasons-its-safe-to-run-zoom-9a2e639b13ec
Below are some notes that we think are worth reading if you have other questions:
https://blog.zoom.us/wordpress/2020/04/08/zoom-ask-eric-anything-webinar-addresses-user-security-privacy-concerns/
https://blog.zoom.us/wordpress/2020/03/30/using-zoom-for-telehealth-virtual-care/
https://blog.zoom.us/wordpress/2020/03/29/zoom-privacy-policy/
https://blog.zoom.us/wordpress/2020/03/27/zoom-use-of-facebook-sdk-in-ios-client/
