Panaudia is secure and private


Panaudia is designed for security and privacy.

All client/server connections are encrypted using TLS 1.2 or better, this includes the WebRTC audio and data streams as well as the WebSockets used for connection initiation.

We use JSON Web Tokens wikipedia.org/wiki/JSON_Web_Token as Tickets to control access to Panaudia Spaces. JWT is a well established and secure industry standard RFC 7519. We sign and validate these Tickets with keys that use the Ed25519 elliptic curve algorithm. These keys are small, fast and provide a high level of security.

We have no interest in your users' data, in fact we go out of our way to keep and store the minimum necessary, for the minimum amount of time, for our systems to operate. We don't retain any personally identifiable information for users connecting to a Space, and only save fully anonymised performance stats to help us improve our services.