Regarding the "Requires federation" section, that is not true. I've been running a small family-only homeserver for several years now, and had federation disabled on it from the very beginning, and there have been exactly zero issues related to (lack of) federation with it.

▲

wkat4242 9 hours ago | parent [-]

Same here, though you do still have to expose it to the internet unless you use a VPN. I'd prefer something with less of an attack service especially because bridges don't currently encrypt, but I host behind vpn now.

▲

pferde 7 hours ago | parent [-]

That's not a fair criticism. Of course you need to expose the server to the network clients are going to be connecting from. Whether that is Internet or just a LAN, that's orthogonal to the protocol.

I've also had an intra-company Matrix server running completely on a company internal LAN, with no Internet access, so there is no inherent need for it to be on The Internet.

	▲	wkat4242 5 hours ago \| parent [-]
		Yes but even for a web service the attack surface is pretty big. Lots of obscure URLs and the code isn't that clean either.