Zero Trust

Zero Trust and Video Calls: What to Expect

January 2025 SecurityZero Trust

Zero Trust stopped being a buzzword years ago — NIST formalized it in 2020, US federal agencies have been mandated to implement it since 2022, and the EU's NIS2 Directive pushes toward the same continuous, risk-based model. The real question now isn't what Zero Trust is, but what it concretely means once it reaches real-time video: per-session access instead of perimeter trust, device and identity posture for every participant, why the media server itself needs to be pushed out of the trust boundary (MLS, SFrame), and a genuine tension with GDPR's data-minimisation principle worth naming honestly.