what does "enterprise-grade" mean? how does it differ from "consumer-grade"?

well it seems the answer is "you can configure your Matrix homeserver to use a single sign-on service for authenticating local users"

my question is this: how does single sign-on protect against people adding the wrong person to a matrix room? how is this relevant to the recent US Government security breach's threat model?

it's entirely irrelevant! whoever wrote this *must* know this right?

there's a strange tension in this paragraph. on the one hand, the Element suite of software wants to be presented as composed and the clear salvation for governments wanting secure communication, but on the other hand it must also be presented as finicky and precariously and just one piece of bad configuration away from being insecure, so that you'll pay the experts to run it for you

"that said, it's worth noting that the fact that Element lets you run your own communication service can be a double-edged sword. It's obviously a positive that Element Server Suite provides a commercially supported, best-in-class enterprise distribution which lets organisations operate deployments with full peace of mind. However sometimes we see critical deployments improvise their own setups by freeriding on Element's community open source components. This introduces significant risks, with the deployment deprived of access to Element's support, best practices, advanced security advisories, audits and accreditations - and without any of the high-availability, scalability and enterprise functionality (e.g. group access control) found in Element Server Suite. In-house teams and irresponsible systems integrators beware..."
0

If you have a fediverse account, you can quote this note from your own instance. Search https://chaos.social/users/jesopo/statuses/114251558744738120 on your instance and quote it. (Note that quoting is not supported in Mastodon.)