The safe messenger for children and parents of Hermann School

A school messenger for our inclusive school

video: Hermann School: Our way through Corona (in German)

For years, Hermann School has been working on a sustainable media concept that meets its special features and special needs. For example, our classrooms have long been equipped with interactive whiteboards.

Then came Coronavirus.

The school traversed the first lockdown with an experiment. We issued all teachers and social workers of the school with an LTE tablet and, after to a first hesitation for data protection reasons, we set up WhatsApp accounts on these tablets. The configuration and use of the accounts took place in a way that is compliant with data protection from our point of view by forbidding the storage of contacts, so as to avoid transmitting these contacts to WhatsApp/Facebook.

Our goal was to achieve the highest possible availability of the school. This is linked to a project booklet-based, website-assisted project teaching and with incentives for students to interact (Question of the day, Store.

We were pleased with the possibilities that opened up to us. We were able to get close contact with many pupils, and in many cases this had a high quality. The possibility of exchanging voice messages, photos and/or videos helped in particular children and/or families with low German knowledge.

On the other hand, we realized that the use of WhatsApp was problematic in many ways, and were looking for alternatives from the very beginning. After a – rather elaborate – look at the market, we realized that none of the available offers was up to our needs. That's why we decided to take a look at Open Source alternatives and found FluffyChat and Matrix.

Powered by FluffyChat

FluffyChat is a messenger client for the Matrix Protocol. It is open source and is developed in Flutter so that it can be compiled for several platforms (including Android, iOS and Web). The developer team focuses on a simple user interface and develops user-friendly functions such as sending voice messages (which at this time is only possible with this matrix client). It uses the matrix SDK from Famedly, a start-up company that offers messenger solutions in healthcare.

The Hermannpost

The Hermannpost is a “mod” of FluffyChat: We have taken the freely available code from Fluffychat and adapted it to our needs as an international meeting school and inclusive primary school. The criteria for the introduction of changes were security, accessibility, data protection and child protection.

Security because we are entrusted with the sensitive communication of students and parents. Accessibility, because we want to make access to this form of communication as easy as possible, as we approach our objective of educational equality. Privacy, because this is a right of every child and family, and our mission is to comply with legal requirements. Child protection because we have to deal with particularly vulnerable people in primary school who need care, support and protection in the introduction of this medium.

Security

We operate our own matrix instance on our own server in our school building. Synapse, matrix.org's reference server software, is running. Matrix has developed into a standard for secure messaging and is used, among other things, by the French administration, by the Bundeswehr and recently by the LOGINEO-NRW Platform.

Our server is not federated – that is, other matrix instances (e.g. matrix.org) do not have access to our server (i.e. neither spaces nor accounts). This also means that children and parents cannot communicate with other accounts outside our server. In other words, our server is closed and protected against external actors.

The use of a specific client adds an additional security layer. The login method uses an encrypted QR code (more under “Accessibility”), which additionally conceals the login data, so that login with another client is not possible.

Accessibility

The login in matrix is a comparatively complex process in which server name, matrix ID and (an ideally long) password must be entered. This represents a hurdle that is difficult to handle for our users. To simplify this login procedure, we have hidden the credentials in a “QR key” and supplemented with a PIN number that must be entered by the user. In this way, we simplify the login process and at the same time enable the use of a long, secure password without the user having to struggle to enter it using a keyboard. The additionally required PIN prevents unauthorized persons from registering with the QR code (or a copy).

As a side effect, this uncomplicated and fast log-on and logout procedure opens up the possibility to easily switch between multiple accounts with a single device. This is of particular importance for us, as smaller primary school children often do not have their own device and depend on using their parents' device. This is also advantageous if several siblings have to share a device.

The availability of translations in several languages in Fluffychat is particularly valuable, as most families in our school do not speak German as a first language.

At various points, we have also made small changes in order to reduce complexity, for example by hiding/reordering some settings and specialized information, using our own easier to understand icons or inserting additional dialogs with images in certain functions.

Privacy

This aspect plays a critical role in the introduction of a messenger service in a primary school. Matrix is designed to facilitate communication between users. For example, you can see in group rooms who is in this room and write to each.

We have made some limitations in the server. This is not federated, that is, it is isolated from other matrix servers and communication between them is not possible. The user directory is disabled so that a search by users cannot be made.

In our client, we have additionally restricted the visibility of personal data in several places. Thus, children and parents are not able to access information from other users in group information. We also have “state messages” that often contain personal information (e.g. “XYZ has entered/deleted the room/changed their avatar”) hidden in our client, which not only benefits privacy, but also increases accessibility (less text helps to focus on the important content).

Child protection

In this area, we have put in a great deal of thought, as we enter into new territory with the use of a messenger service with primary school children and we therefore see ourselves having a special duty to provide care.

The more far-reaching measure we have taken in this area is the restriction of contact possibilities between users. Firstly, the focus is on communication between children/parents and teachers. Secondly, we would like to make possible cyber bullying cases – as far as possible – more difficult.

For this reason, communication between users (parents/children) is possible only by using “QR invitations”. Each user gets his own QR-Invitation with the access data, which he/she can give to other users. Only when this invitation is scanned can a chat be started between both users. In a distance situation it is possible for teachers to send invitations to other children. This means that if a child wants to chat with another child, they can instruct the teacher to send an invitation to this child.

We also have hidden the option to create groups in the client. Teachers can invite children to groups, but they are always supervised, moderated and accompanied by teachers.

We have hidden the option of a video conference for pupils, i.e. only teachers can invite children – provided they have consent from the parents.

Documentation of the changes made in detail

There are additional amendments to facilitate the work of teachers. All changes can be found in the Source Code.

Portability

Except for the use of Excel and VBA script for generating accounts and assigning spaces, our entire digital working environment is based on Open Source. This means that each school can replicate this working environment – and change according to its own needs.

We hope that other schools can benefit from our work and will be happy to help where we can!

Media reports

Chaos Computer Club Remote Congress rc3 nowhere 2021: Presentation [de]

Article in golem.de: Primary School Forked a Messenger [en] (translation) — (original [de])

Report from WDR: The Self-Made School Messenger [de]

it-zoom.de (mention): The Digital Classroom [de]

Resources

The following are links to all resources we have used:

Source code for Synapse (Matrix Server): https://github.com/matrix-org/synapse/

Source code for Matrix Corporal (Content and Space Administration with Moderation Tools): https://github.com/devture/matrix-corporal

Source code for FluffyChat: https://gitlab.com/famedly/fluffychat

Source code for Hermannpost: https://gitlab.com/hermanncoders/hermannpost

Source code for Jitsi Meet (Videoconference server): https://github.com/jitsi/jitsi-meet

Source code for Nextcloud: https://github.com/nextcloud/server

About Hermannpost: web page, interview, video (in German), source code

Original web page in German at hermannschule.de Retrieved 2022-05-20, translated by Julian Foad assisted by LibreTranslate, May 2022

#schools #matrix #awesomeFOSS #Hermannpost

Follow/Feedback/Contact: RSS feed · Fedi follow this blog: @julian​@wrily.foad.me.uk · matrix me · Fedi follow me · email me · julian.foad.me.uk Donate: via Liberapay All posts © Julian Foad and licensed CC-BY-ND except quotes, translations, or where stated otherwise

Instead of relying on Teams or Google, a primary school in NRW uses a customised Matrix client during homeschooling. The effort is worth it.

An Interview by Moritz Tremmel published on 24 January 2022, 9:15 am

Contents:

1. Matrix: Primary School forked Messenger
2. A matrix server alone does not yet make a primary school messenger
3. How Hermannpost came to the app stores

Actually, Nacho Ruiz is deputy head at the Hermannstraße community primary school in Stolberg and not a programmer. But, searching for a messenger that works well even for primary school children and which takes into account the school's data protection and care requirements, he did not find one. So he installed a matrix server and forked the Fluffychat client to adapt it to the needs of the school and the students. The result is Hermannpost.

In an interview with Golem.de, Ruiz tells how this extraordinary project came about and a primary school in North Rhine-Westphalia became a messenger operator while fighting with the corona pandemic and the flood in the summer of 2021.

Golem.de: Schools are usually not known for outstanding IT projects. On the contrary, most schools lack IT skills and knowledge. What is different at the Hermannschule, that it even manages to set up its own messenger?

Nacho Ruiz: This is primarily a stroke of luck. Our headmistress has always taken the digital education mandates very seriously, since long before the Digital Pact for Schools was available. For example, we have long had an interactive whiteboard in each classroom. In addition, we have a great, dynamic team that is very open to digital technology and likes to engage with it.

We provide the children with the possibilities offered by the use of media. As a school we also try to find digital tools that make our work easier. And if something doesn't fit perfectly, we'll get together. We don't shy unusual ways. This is something special at our school, and I am happy to help.

Golem.de: With these requirements you have set up Matrix immediately?

Ruiz: No, the Corona pandemic got us too cold. We were just as unprepared for homeschooling as other schools. Although we had established digital communication structures within our college – for our school management system we have Microsoft 365 – but we couldn't reach our students.

After parental requests, we decided to open a channel via Whatsapp. However, not via the teachers' private devices, but via service tablets with LTE and with their own phone numbers. In order to meet data protection as much as possible, the condition was not to create groups and not to store contacts.

From Whatsapp to Matrix

Golem.de: How were the experiences with Whatsapp?

Ruiz: That worked pretty well. Children and teachers could get in contact again directly through the messenger. We then have made projects where children have solved tasks on paper or have crafted things and then sent photos of them.

Remember, we're a primary school. First year pupils can't read and write yet and still have to be involved in communication. That's how voice messages helped. Some children have literally spammed us. We then had to explain to them: Think about what you actually want to say and then record a voice message. This is ultimately also a form of media formation that takes place there.

We were therefore quite satisfied overall with the result. But the catch was that it ran over Whatsapp.

Golem.de: How did you find Matrix?

Ruiz: We then searched for alternatives on the market, but each one always had some catch. For example, the administration was partly very complicated, the licenses were very expensive or there were missing speech messages that we absolutely needed. I then looked at the matrix client Element, then still Riot. The biggest hurdle was the input of username and password – especially if you want safe passwords.

Then the idea came to me: we have access to the source code, maybe as a solution we can put a QR code in the registration process. I was looking at Element/Riot at the time to see if that could work. I then pushed onto the matrix client Fluffychat, which looks much more user-friendly and is very similar to Whatsapp or Signal. In addition, it could do voice messages, which Element could not do at the time.

Golem.de: So you got a matrix server?

Ruiz: Exactly. We had an old management server in the basement, and I installed CentOS. For the installation of the Matrix Server Synapse, we obtained help from an external admin who runs a large public matrix instance in Germany and now also manages our server. With it, we also have a contract processing contract with the GDPR.

This worked directly and didn't need much resources. We also found the on-premise idea very nice, to have the data in the school. That also convinced the parents, everyone was happy – and then the flooding came and flooded our school. There was the server in the cellar. Not to be able to reach the children in the middle of the catastrophe area at once, that was quite annoying. Luckily we had a backup and our admin Milan was able to raise a new server relatively quickly.

A matrix server alone does not yet make a primary school messenger

Golem.de: But a server alone doesn't make a messenger yet. How was it going?

Ruiz: The more exciting question was: do we get Fluffychat adapted to our needs? For example, we wanted to prevent parents from writing other children. But also the children among themselves should not be able to write in question or form groups. We already wanted to avoid that bullying cases could occur at all.

We then took the code from Fluffychat, which was possible thanks to Open Source, and began to make adjustments. For example, we have another branding, our adapted messenger is no longer called Fluffychat, but Hermannpost. Above all, we have limited or simplified functions.

Golem.de: For example?

Ruiz: For example, we have significantly fewer options for setting, which significantly simplifies the use of the messenger for people who are not so skilled in the art. These are often trivial things, in which we simply made some options commented out or hidden, or made the icons more school friendly and sometimes bigger, so that the children can find them better.

In addition, only teachers can create groups. As already mentioned, it was particularly important for us that parents – who also use Fluffychat for contact with the school – cannot simply write to other children. We also removed the user lists in the group rooms where you can usually see who else is in the room.

In addition, we do not send status messages when a member of a group is added or leaves them. For example, if we accept a new parent in a group, that's not the other parents' business.

Golem.de: What do the Fluffychat developers say to your fork? Wouldn't it have been easy to integrate the functions directly into Fluffychat?

Ruiz: We wrote to the developers of Fluffychat right at the beginning. These are super nice and competent people who have also taken the time to talk to us. But for the Fluffychat developers many of our changes were not appropriate. For example, our login process with QR code and PIN requires a central administration. This is simply not an application case for Fluffychat.

Login with QR codes was the most extensive change

Golem.de: Your login process is the biggest change you have made on the messenger. What exactly have you adapted?

Ruiz: As I said, we have to deal with primary school students, who may not be able to write yet – a user name and a long, complicated password simply don't work. I then tried to get the credentials from a QR code reader in Fluffychat. That worked directly. But if we used such a QR code, anyone could scan it and get the access data. In addition, we did not want children to be able to register with a different matrix client than ours, because, as I said, we deliberately disabled some features.

So we encrypted the password with AES and printed it as a QR code. The children can scan the QR code and the Hermannpost app can then decrypt the encrypted password. However, for security the password is not complete: the last four digits are missing. The children themselves or parents must insert them, so that no one can register only by scanning the QR code.

Golem.de: Can the children write each other messages?

Ruiz: Not easily. The children must first have invited each other by QR code. Alternatively, they can ask teachers who can then send an invitation to the other child. We have implemented this for youth protection reasons. After all, we accompany the children in their first messenger experiences.

How Hermannpost came to the app stores

Golem.de: Who uses Hermannpost? How many users did you have to generate QR codes?

Ruiz: All employees, all parents and children of the school have an account. These are about 500.

Golem.de: What do you use the Messenger for?

Ruiz: The focus has been on announcements, memories and direct communication since the return to in-person schooling. During the lockdown, we taught complete lessons via the messenger. This has proven itself to us.

We had a timetable that the children could follow in real time. We started with the logo messages, and we gave the children tasks. For project teaching, we had created and distributed project books, for each page there were additional materials such as HTML pages, subject stories from the show with the mouse or videos we created or a quiz. In between there were always movement breaks with videos that the sports instructors did.

In addition, over public rooms, the children were able to receive additional offers such as music, crafts or sewing. It was a lot about getting the children active during the lockdown.

Golem.de: Other schools had set particular emphasis on teaching via video conferencing.

Ruiz: We have not used video conferencing to deliver lessons. Our children come partly from financially not so well-placed families, who, for example, only have a smartphone that children can access in the evening. Using Hermannpost, however, they will see the groups in the evening about what happened over the day, and can still participate in the class because it does not have to be synchronous.

Also we find video conferencing difficult because of privacy. On a video call you can hear and see a lot from the families, particularly in small apartments, that is none of your business.

Golem.de: And how do users get the app? Is Hermannpost available for Android and iOS?

Ruiz: Fluffychat is written in Flutter, which allows us to support Android and iOS. On Android you can download Hermannpost in the Google Play Store. However, we are listed there as beta version. This has the advantage for us that it is significantly less expensive because Google require fewer checks.

It's a bit more complicated on iOS. We have few iOS users, but enough that we had to provide them with the app. Here, too, we are in the beta program, but first, Testflight must be installed so that beta apps can be installed via a shared link. In addition, the app needs to be updated at least every 90 days, even if we have not changed it. In the end, we have done what is necessary to enable users to install the app. In addition, we have created instructions and help.

Golem.de: Is there a desktop or web client?

Ruiz: Currently not. With Flutter, this would be possible without great effort. Fluffychat can do that.

Golem.de: Does Hermannpost also support federation, such as communication with other schools? Is there an end-to-end encryption?

Ruiz: No, we deliberately did not federate because the messenger should only be used in school. With the end-to-end encryption, it is somewhat more complicated. That still gives us the most problems.

Between the teachers we have activated end-to-end encryption. With the pupils and parents at first we have avoided it, because the keys always get lost again and then old messages can no longer be read. Unfortunately, this happens again and again with the teachers, even though we have trained them, unlike the parents and children. Accordingly, we have found end-to-end encryption for parents and children so far unreasonable.

We're still looking for a solution. For example, we have already thought about generating the keys and recording them in the QR codes. So far, we simply haven't had time to deal intensively with it. But of course we used a transport encryption to the server and the hard drives in the server are also encrypted. But since we manage the server ourselves, it is not federated, and it is only used for school communication, we found it justifiable. It is, of course, not yet optimal.

The messenger of the ministry is also based on matrix – but that came later

Golem.de: There is no official school messenger?

Ruiz: In fact, the school ministry announced a messenger before summer holidays 2020, but there was no concrete information about it at first. So we didn't know what range of functions it would offer and on what basis it would be created. But above all, we didn't know when it was coming. So we didn't want to wait for the country and then maybe find that the messenger does not have important functions for us. That is why we decided in June 2020 to take care of ourselves.

I then worked through the summer holidays, but with the start of school in August 2020 we had our own messenger solution based on Matrix and Fluffychat. The solution from the school ministry, the Logineo NRW Messenger, which is also based on Matrix, was not yet there. In contrast to us, the Logineo messenger is based on Element.

Golem.de: Wouldn't there be a change to Logineo?

Ruiz: Unfortunately no. We are pleased that the ministry also focuses on Matrix and Open Source, but even if the basic technology is the same, our adjustments to the Logineo messenger are missing: Logineo uses a completely different registration technique with Single Sign-on (SSO). You can't use our messenger.

In addition, we manage users and groups via Matrix Corporal. For example, if we assign users to the different rooms where teaching takes place or announcements are posted for the entire school. This is not possible after logineo. With appropriate resources and know-how, you could certainly make use of our adapted messenger for the Ministry's solution – but unfortunately we did not.

Golem.de: What problems did you face as a school that operates your own messenger?

Ruiz: The basic problem is time. Actually, we don't have the resources to run our own messenger. That's all right, and we're glad that we have the messenger and have been able to adapt it to our needs thanks to open source software.

On the other hand, our project is very time-consuming. Fluffychat continuously introduces new features and makes a lot of refactoring – that's great, of course, but we are just hardly keeping up. In addition, we are exhausted by Corona, the flood and also the app development.

It's a bit the field we're moving in. Actually, we need someone who looks after it properly as their own job – not just on the side.

Golem.de: What do you want for the future?

Ruiz: Actually, we want someone to take over the development of the messenger. So our ideas and experiences are taken up and the project continues, professionalizes and then also opens for other schools – it does not have to be called Hermannpost. We cannot afford that right now. For example, we cannot give other schools our key to creating QR codes.

About Hermannpost: web page, interview, video (in German), source code

Original article in German at golem.de Retrieved 2022-05-20, translated by Julian Foad assisted by LibreTranslate, May 2022

#schools #matrix #awesomeFOSS #Hermannpost

Follow/Feedback/Contact: RSS feed · Fedi follow this blog: @julian​@wrily.foad.me.uk · matrix me · Fedi follow me · email me · julian.foad.me.uk Donate: via Liberapay All posts © Julian Foad and licensed CC-BY-ND except quotes, translations, or where stated otherwise