Having secure "at rest" data on the server is very important for data safety, especially due to the new privacy laws within the European Union. Nextcloud for example offers an easy to use server side encryption for its services within the settings. No special software is neesed.

Our organisation really wishes an easy to setup server side encryption within the dashboard.

Since HipChat is very buggy it would be nice to have Mattermost fully replace HipChat. That means that the current(beta) integration needs to be expanded to provide at least notifications for comments: craeted, updated and deleted.
In that way you can get important notifications when you have urgent issues.

A plug-in that show you: read or not read of a message (like WhatsApp / WhatsApp-Web)
read confirmation: Chat is open and the application is in the foreground

It would be awesome for us, when something like this could be achieved:

I use a slash command in a thread (right side), the triggered post will include the parent message id.

Add the parent message id to incoming webhooks. So I can reply to a thread with webhooks.

I just wonder that if MM could set background color for messages by condition.
Like hipchat that bot messages could show with different color by info level:
green => success
yellow => warning
red => failed

https://cdn-standard.discourse.org/uploads/mattermost/original/2X/7/7c73a31b081c6207d23ff87a7a98aafe89d83901.jpg

ToDo and Notes for private or channel usage.

Integration of Wekan - Open Source Trello-like Board System

Now I almost have 40 channels(include direct message channel), it's not easy to find 5 channels which talked to me in last 1 minutes in all my channels and to switch comment between these channels.

Hope there is an option with "by alphabet" or "by the last updated" to control the channels list order.

Integrate Mattermost with Smooch.io would enable us to use a wide range of platforms within one tool. This also would end up having several requests here solved too - since Smooch also offers Native SDK's, Web Chat and much more.

https://smooch.io

One thing you need the whole time when really working with Mattermost is pasting links from other applications like Jira. Because there is no tight integration, either the other person has to open the link all the time or I have to copy the issue title besides the link.
The only way I could solve this party was with a slash command (because it works for every channel) (https://github.com/mattermost-jira-info/mattermost-jira-info)
But it would be nice to extend the link parser (link preview) to be able to connect it to other applications....

The RTM API allows integrations to connect to slack from behind a firewall, seemingly connecting much like a normal desktop client might, from any computer, not just an externally visible server.

It's a very important enterprise feature for those wanting to integrate Mattermost with their internal applications.

Further discussion on this can be found here:
https://forum.mattermost.org/t/does-mattermost-support-real-time-messaging-api-from-slack/1287/2

And this slack FAQ describes the differences between the Events and RTM API's:
https://api.slack.com/faq#events_api

This is the Slack RTM API spec:
https://api.slack.com/rtm

Currently non-admins cannot create personal access tokens unless they ask an admin to enable personal access tokens for them. Considering that any user could already go through the SSO flow or use username+password depending on the setup to get a token for the API, there should be a config option to allow everyone to create personal access tokens by default.

Bots are only able to post text messages to rooms, however, it would be convenient if bots were able to attach photos as a message to the room.

We would prefer if our bot didn't have to upload images to an accessible URL and then post that url to the room (and then only get a preview of an image), as this adds a few extra steps to viewing the image and requires our bot to be aware of when it is done uploading the image to the host and then finally post the link to the room.

An on-boarding bot helps new users to on-board into a work environment. In every channel a new team member enters the On-boarding Bot will send a message explaining the channel, what is done there, how the team member can get involved, whom to contact etc. This would help organizations and teams to work more efficiently.

The last question regard this topic in this forum was not very helpful. Therefore my question: I have in my company mattermost installed. E.g. matter.mycompany.com - Now I would like to integrate mattermost in e.g. via iframe. How can I easly active the iframe option - in General or just for mycompany.com if this is possible? Thanks in advance!

This pull request introduced a security measure to protect against clicjacking attacks: https://github.com/mattermost/platform/pull/253

But it also prevents some legitimate uses of iframes. For example, Nextcloud has a "external sites" function to run any app as if it was a Nextcloud app, by putting it in an iframe inside Nextcloud (https://docs.nextcloud.com/server/9/admin_manual/configuration_server/external_sites.html).

My proposal is to add some settings to allow an authorized domain, and then change X-Frame-Options, instead of DENY put ALLOW-FROM this domain. And to check the domain also in the javascript check in head.html.

This way it would allow legitimate uses, while still protecting against clickjacking attacks.

This would allow for instance to execute a command for the user from a link in the introduction to display a code of conduct, help or whatever usefull content.