Orange Me2eets: We made an end-to-end encrypted video calling app and it was easy

What this post added

This post details the implementation of end-to-end encryption (E2EE) for the open-source video calling application Orange Meets, built on Cloudflare Workers and the Cloudflare Realtime SFU service. It explains the challenges of E2EE for real-time, high-bandwidth communication compared to text messaging, and how the Messaging Layer Security (MLS) protocol was adopted. The implementation involves using a Rust-based Web Worker compiled to WASM for encrypting/decrypting video frames via the WebRTC API's transform stream capabilities. It also addresses codec-specific issues, such as handling VP8 header bytes to prevent browser depacketizing errors, and outlines the process for new users to join encrypted rooms.