Microsoft Teams Calls will soon include end-to-end encryption
I wonder if they&#x27;ll make it unverifiable (like Keybase[1]), opportunistic (like WhatsApp[2]), requiring confirmation in every call so nobody practically uses it (like Telegram[3]), hide the key verification screen so 0.001% practically does it (like Signal[4]), uses long-lived keys that can decrypt all historical traffic (like PGP), have encrypted mode be some second-rate mode that removes most of the features you need (like Telegram&#x27;s encrypted chats; I see that the announcement already mentions some unavailable features when you turn on encryption), or if they&#x27;ll have a novel trick to break the encryption at will. At a minimum, I expect it&#x27;ll be an obfuscated binary with auto-updates and no published independent code reviews.<p>Let&#x27;s hope Microsoft surprises us all! (as I see most of the comments being skeptical)<p>[1] Try to verify which encryption keys your mobile keybase chat client is using or if the server injected its own keys. Bonus points if you spot the &quot;this chat is end-to-end encrypted&quot; banner while you&#x27;re doing this. Details: <a href="https:&#x2F;&#x2F;security.stackexchange.com&#x2F;questions&#x2F;222055&#x2F;how-can-i-verify-keybases-end-to-end-encryption-between-me-and-a-friend" rel="nofollow">https:&#x2F;&#x2F;security.stackexchange.com&#x2F;questions&#x2F;222055&#x2F;how-can-...</a><p>[2] You have to go into settings to enable even just seeing key changes, let alone that the client stops you from sending messages when a previously verified key changes.<p>[3] Telegram calls have encryption, but every time you have to verify the emojis again and again instead of it just storing the other party&#x27;s key.<p>[4] Threema shows the verification status for every chat. My mother in law, from her own volition, wanted to verify keys with me. She later tried Signal to compare, since she needs to use something encrypted for her work (medical data), but didn&#x27;t get that she had to verify keys on Signal, too. I find that even techies often don&#x27;t know where to find that in Signal, or even realize that it&#x27;s required for the security claims to apply.