BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.pass-the-salt.org//pts2025//talk//AN9QJ8
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-pts2025-AN9QJ8@cfp.pass-the-salt.org
DTSTART;TZID=CET:20250702T143500
DTEND;TZID=CET:20250702T151000
DESCRIPTION:The French government has deployed a private Matrix federation 
 for French civil servants called Tchap.\n\nCurrently this federation has a
 bout 300 000 monthly active users and its usage is growing constantly.\n\n
 Today our federation is closed and we would like to be able to connect wit
 h other public French Matrix nodes (local authorities for instance)\, and 
 also other European countries.\n\nWe should implement measures to ensure t
 hat the federation remains resilient against potential attacks\, both tech
 nical (e.g.\, DDoS\, data interception) and organizational (e.g.\, unautho
 rized access\, insider threats) :\n\n*   How can we restrict the servers w
 e wish to communicate with? How can we be sure that we are actually commun
 icating with them? Since TLS can be vulnerable to man-in-the-middle attack
 s by state actors\, we can't rely on it entirely.\n*   How can we trust th
 e identities of users from external deployments that we don’t control?\n
 *   How can we limit the interactions that external users can have with us
 ers from our federation?\n\nWe spent a lot of time thinking about this and
  now have a plan that looks legit\, and that we are currently implementing
 . I'm sure you want to know more about it\, right?\n\nIn this talk\, we wi
 ll share the approach we’ve taken to address these challenges and we wil
 l present the architecture we designed.
DTSTAMP:20260610T034306Z
LOCATION:Amphitheater 122
SUMMARY:Matrix French gov deployment: opening a private federation securely
  - Mathieu Velten\, Yoan Pintas
URL:https://cfp.pass-the-salt.org/pts2025/talk/AN9QJ8/
END:VEVENT
END:VCALENDAR