Solved Message Encryption

[NicoC]

Hi All,
I was wondering if someone may be able to shed some light on the encryption used for messaging in 3CX. I have searched the forum and found a lot of information for SRTP and encrypted calls but nothing for the messaging function. I found this KB article https://www.3cx.com/pbx/encryption-benefits/ but it only says encryption is in place for messaging.
My assumption is that this means messaging is over port 443. Does 3CX do end to end encryption on messages where each user has their own key (Similar to say WhatsApp, signal or element)? If it is not end to end is there anything on the roadmap to implement this as a feature?

Thanks in advance

Nick

 

[SweetAction]

SMS/MMS is not end to end encrypted. All communication passes through 3CX middle tier servers at this time (look at the callback URLs)

From SIP Trunk to 3CX appears to be over https and from 3CX to your PBX should be (unsure) https, but the contents are likely visible to 3CX

 

[StefanW]

SMS/MMS is not encrypted on carrier level, it is always clear text passed between all endpoints.
We receive the incoming messages in TLS from the provider and redirect them to your 3CX System in TLS.
Your clients also connect to 3CX in TLS. So there is only transport security.

The central server distributing the messages for you from 3CX is a pure forwarder. We don't store/log message content or phone numbers unless asked by support to change for support cases the proxy server where it is detailed that we will be able to read the content.

 

[NicoC]

Hi Folks, sorry I may have used the incorrect terminology. I was not referring to messaging via SMS/MMS and more so referring to the chat function inside 3cx. Are the chats E2EE or just sent over port 443/SSL

 

[NickD_3CX]

Hi Folks, sorry I may have used the incorrect terminology. I was not referring to messaging via SMS/MMS and more so referring to the chat function inside 3cx. Are the chats E2EE or just sent over port 443/SSL

The same here as well, the transport is encrypted, but the data in inside is plain text.