[SIP-Account] Add notification that the call / conference won't have End-to-end encryption (by default / anymore)
all supported OS:
If you visit the website of Jami (https://jami.net/) it is mentioned that Jami has End-to-end encryption by default.
However this is not true if you are using SIP-accounts (only; or mixed with Jami accounts #1398 (comment 34317)) jami-docs#25 (comment 45602)
Especially if one peer is using the PSTN: https://www.twilio.com/blog/srtp-deep-dive
|
It is possible to use E2EE on a SIP-call using ZRTP but this will probably be not the default setting of all peers. And even if you have E2EE the SIP call will probably generate call detail records. |
|---|
https://www.linphone.org/technical-corner/post-quantum-encryption
https://datatracker.ietf.org/doc/html/rfc6189
So we should display a message if you add a SIP-account like:
"Note: Although Jami accounts always use end-to-end encryption by default, SIP-Accounts won't have end-to-end encryption even if you use (transport) encryption methods like Udp or tls. Using SIP-Accounts together with (e2e encrypted) Jami accounts might exploit data of other peers that communicate from a Jami account to a SIP-account and vice versa.
Also using the phone network might generate (additional) metadata even if you use ZRTP and E2EE"
And a dialog box with options like
- I understand and I wish to continue (Opt-In: Don't show this message anymore -it won't be shown unless a new own Jami is added)
- Use ZRTP and E2EE: Other peers won't be able to join if not enabled (Note. This might still generate metadata/call detail records)"
- I only want End-to-end encryption always by default - Do not use a SIP-Account / cancle