Orange Me2eets: We made an end-to-end encrypted video calling app and it was easy

Cloudflare describes how Orange Meets adds end-to-end encryption to WebRTC video calls using MLS, with client-only Rust/WASM workers applying encoded transform encryption/decryption to media while keeping SFU unchanged. It covers handling codec quirks (e.g., exposing small VP8 header bytes), a simplified client-side join/leave protocol (“designated committer”) formally modeled with TLA+, and protections such as safety-number verification and transparency initiatives to mitigate MITM and malicious JavaScript risks.