TL;DR: Matrix 2.0 shifts Matrix from secure messaging toward collaboration infrastructure, with SSH Communications Security saying that makes identity and federation governance the harder problem. Federated collaboration now needs explicit ownership for membership, trust, and lifecycle control across shared domains.
Editorial analysis by NHI Mgmt Group, based on content published by SSH Communications Security: “What We Learned at the Matrix Conference 2025: Stability, Scale, and Invisible Security”.
Key questions
Q: Why do collaboration tools complicate identity governance?
A: Collaboration tools combine communication, approvals, reminders, and access distribution in one place, so a small entitlement mistake can expose a wide set of business conversations.
Q: What should teams do when collaboration moves from messaging to shared workspaces?
A: Re-evaluate lifecycle control, external access policy, and audit ownership before the platform becomes business-critical.
Q: How should organisations govern federated collaboration platforms like Matrix?
A: Treat federated collaboration as an identity governance domain, not just a communications tool.
Practitioner guidance
- Define federation governance boundaries Map which external domains, rooms, and workspace types are allowed to interoperate, and require explicit policy for each trust relationship rather than default openness.
- Review lifecycle controls for shared collaboration spaces Test whether join, mover, and leaver events are consistently handled across chat, voice, video, and workspace participation, including cross-organisation revocation.
- Plan for cryptographic transition paths Inventory where collaboration systems depend on group encryption and define a migration approach for post-quantum cryptography and MLS-based protection.
Bottom line: Matrix 2.0 reflects a shift from secure messaging to collaboration infrastructure, which raises the governance burden for identity and federation.
Glossary terms: Federated Collaboration, Messaging Layer Security (MLS), Post-Quantum Cryptography, Digital sovereignty
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Matrix 2.0 is becoming collaboration infrastructure, not just a secure chat protocol. That shift changes the governance problem from protecting a messaging channel to governing a distributed collaboration fabric. Identity, federation, and lifecycle controls now have to work across chat, voice, video, and shared workspaces. Practitioners should evaluate Matrix as part of the collaboration control plane, not as a niche communications tool.
A question worth separating out:
Q: How do post-quantum cryptography and MLS affect secure collaboration planning?
A: They shift planning from point-in-time encryption choices to long-term trust maintenance. Teams should identify where group membership, device turnover, and cryptographic migration intersect so they can avoid redesigning collaboration governance under pressure later.
👉 Read our full editorial: Matrix 2.0 turns secure messaging into collaboration infrastructure