Zoom consultant Alex Stamos and experts say offering end-to-end encryption, which needs user authentication, only to paying customers is a reasonable compromise
Dan Goodin / Ars Technica : Tweets: @ncweaver , @alexstamos , @alexstamos , and @alexstamos Tweets: Nicholas Weaver / @ncweaver : @evan_greer @pvineetha Billing records matter. $15/month is establishing a paper trail and friction. I'm very comfortable with this decision, esp since proper end-to-end requires significant authentication infrastructure that isn't needed in the current security model. Alex Stamos / @alexstamos : I seem to be in the unfortunate position of having a reporter with a personal beef against me. The tell that this piece is a personal attack and not straight reporting is me being blamed for an NSA backdoor I helped find, eliminate and then quit over. https://techcrunch.com/... Alex Stamos / @alexstamos : There are legitimate product reasons for making E2EE an opt-in feature. Such reasons existed for Facebook Messenger (which FB is working on) and exist now for Zoom. In both cases, I think optional E2EE on top of transport encryption is better than no E2EE option at all. Alex Stamos / @alexstamos : End-to-end encryption is one of the best protections against surveillance, although not sufficient on its own. I have been involved with shipping E2EE on two widely used products and I'm working on the third. An attempt to do so at Yahoo in concert with Google was killed by both.
Context & Ripple Effects
The debate over who gets real encryption is old: Facebook kept Messenger's end-to-end encryption off by default over key-storage and UX constraints, and years later Twitter shipped encrypted DMs exclusively for paying subscribers. Zoom's proposal — restrict E2EE to $15/month accounts because proper user authentication requires significant infrastructure — puts it squarely in that lineage.
Security researchers Alex Stamos and Nicholas Weaver defended the tiering as a reasonable compromise, with Weaver arguing billing records add deliberate friction and a paper trail that deter abuse. The position proved unstable: days later, Zoom backtracked and committed to offering E2EE to all tiers of users willing to verify a phone number.
First-order effects
- Free-tier Zoom users are excluded from end-to-end encryption under this design, while paying customers get calls protected by the full authentication infrastructure that verified identities require.
- Stamos and Weaver publicly stake out that paywalling strong encryption is defensible — Weaver explicitly endorsing billing records as friction that establishes accountability.
Second-order effects
- Twitter's later decision to gate encrypted DMs behind Blue subscriptions on both ends shows the paywall-for-privacy model spreading to other consumer platforms, with the same trade-off: metadata stays unencrypted even for those who pay.
- Public backlash forced Zoom into a reversal within weeks, signaling that subscription-gated encryption carries reputational cost that rivals must weigh before copying it.
Third-order effects
- If identity verification replaces payment as the gate, the structural shift is toward encryption tied to authenticated accounts — trading anonymity for cryptographic guarantees, a tension that runs from Messenger's opt-in model through Ozzie-style backdoor debates over who can be trusted with keys.
- Consumer platforms appear headed toward a split security model where strong encryption is a feature tiered by friction (billing or phone verification) rather than a universal default, leaving unauthenticated channels as the weak link.
The trend: Consumer communication platforms are converging on authenticated, often paid, tiers as the precondition for end-to-end encryption instead of shipping it as a default for everyone.