Jump to content
Mumble forums

Encryption


nhoglund
 Share

Recommended Posts

I see in Mumble that there is encryption going on for the control channel and for voice? Does that mean that all voice and text messages going through mumble is encrypted?


What are the encryption keys? Are they derived from the certificates? Or, in other words, if I verify the fingerprints on the client and server certificate, can I be certain nobody could eavesdrop on a conversation in Mumble, assuming the server is secure?

Link to comment
Share on other sites

  • Administrators

Hi. Voice as well as control channel are AES encrypted at all times. This also includes text (which is transmitted through the control channel). We do not even allow encryption to be switched off at all :D


The encryption uses session keys which are negotiated while connecting. Server as well as client can use certificates to verify each others identity. If you do so you can be certain, assuming the server is secure and no one has the servers/your private certificate, that nobody can eavesdrop on anything going out and into your client.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...