Get in Touch

Course Outline

Decentralized Communication Sovereignty

  • Assessment of data governance vulnerabilities associated with centralized messaging platforms.
  • Technical overview of the Matrix protocol, including event structures, room management, and federated architectures.
  • Evaluation of Synapse and Dendrite homeserver options for government deployment.

Homeserver Deployment

  • Implementation of a Docker Compose stack integrating Synapse, PostgreSQL, and Element Web.
  • Configuration of reverse proxies using Nginx and Let’s Encrypt for secure access.
  • Establishment of federation protocols via .well-known delegation and port 8448 configuration.

Authentication and Identity

  • Configuration of local authentication, LDAP integration, and OpenID Connect standards.
  • Enforcement of user registration policies and controls for guest access within public sector environments.
  • Implementation of Single Sign-On (SSO) solutions using Keycloak, Authentik, or Authelia.

End-to-End Encryption

  • Management of cross-signing mechanisms and device verification workflows.
  • Provisioning of key backup and recovery protocols for lost or compromised devices.
  • Analysis of administrative responsibilities regarding encrypted rooms and data export compliance for government agencies.

Spaces, Rooms, and Bridges

  • Structuring organizational spaces to align with departmental hierarchies and project-specific requirements.
  • Deployment of IRC, Slack, and Telegram bridges to facilitate inter-departmental communication.
  • Utilization of threading, reactions, and automated bots for operational efficiency.

Security and Moderation

  • Administration of user management, room termination, and data deletion via the Admin API.
  • Implementation of privacy controls including message retention schedules, redaction capabilities, and media purging.
  • Mitigation of spam registration threats through rate limiting and CAPTCHA enforcement.

Maintenance and Scaling

  • PostgreSQL maintenance procedures, including vacuuming, indexing optimization, and long-term data retention strategies.
  • Sizing of media repositories and offloading strategies to S3-compatible storage.
  • Monitoring infrastructure using Prometheus and enforcement of logging retention policies.

Requirements

  • Intermediate proficiency in Linux system administration and Docker fundamentals.
  • Comprehensive understanding of federated messaging protocols and HTTPS standards.
  • Familiarity with web proxy configuration using Nginx or Apache.

Audience

  • Enterprise IT teams transitioning from Slack, Teams, or Discord to sovereign messaging solutions for government.
  • Personnel in regulated industries, including healthcare, finance, and defense.
  • Organizations prioritizing decentralization and privacy compliance.
 14 Hours

Number of participants


Price per participant

Upcoming Courses

Related Categories