OPERATIONAL SECURITY DOSSIER

General

The Society of Rho Phi holds as its founding principle and continuing exigence the faithful and facilitated execution of the democratic will of its members; In this interminable purpose, the Society shall not falter to believe that will exists separate from the conditions and mechanisms by which it is harbored, and especially by the sovereignty of its tools of execution and the methods by which the will is informed; As such, Rho Phi shall endeavor to curate and closely govern the use of platforms outside of its direct formulation so as to maintain all due independence and control over the facilitators of its operation; With regard to best practice, the rule for vendors should be that member driven solutions are to be considered first with alternatives that enable the maximum amount of member input to be considered next with all due regard to the feasibility of their implementation with time constraints and migration into more control performed in due time as possible and sovereignty over data as a non-negotiable; All passwords and other relevant login information are to be kept by the last-acting Grand Commissioner Secretary and by the last-acting Administrator of Rho Phi and distributed as is necessary with regard to the necessity and integrity of Rho Phi:

Vendors

Intelligence

The use of any Artificial Intelligence (AI) platform, product, or service, including any offered by any hereafter permitted organization, is entirely and prejudicially prohibited for the planning, drafting, modification, refinement, organization, or execution of any materials related to Rho Phi for any reason which is at all avoidable; This use reflects an imminent danger to the democratic nature of Rho Phi and further to the necessary condition of all words and actions of Rho Phi to be really, known, and perceived as entirely created, deliberated, and propagated by the sole intelligence and ability of its member in collective; The use of AI tools when not employed for planning, drafting, modification, refinement, organization, or execution is permissible in cases where a sanctioned service requires the use or there are no member generated alternatives, especially in technical aggregation or analysis;

Google

Google may be used as a vendor for the ease of creation, storage, and dissemination of documents and other materials of or pertaining to Rho Phi; Permitted accounts with Google are as follows:

  1. V000-708A:
  1. For primary storage of documents and related material and registry with digital third party vendors for services as well as official communications of Rho Phi;
  2. V000-708C;
  1. V000-708B:
  1. For secondary communications and notifications of members and relevant non-members requiring no reply;

Access to these accounts may be maintained by:

  1. The current Administrator by default;
  2. The last-acting Grand Commissioner Secretary;
  3. The last-acting Grand Commissioner General;
  4. Deputies explicitly permitted by their Charter with the assent of at least one formerly named office;

Google is further permitted for use as it applies to the facilitation, propagation, analysis, and reform of V000-704; This provision is contingent upon lack of substantially more secure means to conduct the allotted activities of Rho Phi with the required ease and infrastructure, whereby the presence of such shall constitute the immediate elicitation of Rho Phi to migrate the conduct herein to that service, until such time as a fully proprietary means is made possible; The use of Google Services must, as such, be conducted under the pretense that all information thereunder is inherently compromised;

Meta

Meta’s platform of services including but not limited to Facebook, Instagram, and WhatsApp are forbidden as an outstanding threat to the image and operational security of Rho Phi;

TikTok

TikTok may be used for the limited and wholly approved issue of strictly public information and promotion of Rho Phi under registration with V000-708A under the supervision of a Chaplain;

X

X (formerly Twitter) is strictly forbidden from any form of association with Rho Phi or utilization by Rho Phi for any service whatsoever as a matter of ensuring the integrity of the image and acceptable state of public relations of the organization;

Reddit

Reddit is prohibited as an avenue of dissemination for information regarding Rho Phi and may not be used in any official capacity by or for members and must be seen as a substantial risk to the integrity of internal alignment of members to the Fraternal Purpose of Rho Phi;

Oracle

Oracle is a permitted vendor of the Virtual Machine hosting of the Rho Phi website; It is permitted to retain any information permissible to V000-704 with registry under V000-708A accountable to any provisions of the latter; It is permitted to host the following accounts:

  1. V000-704A for registration and communications by the Administrator of Rho Phi;
  2. V000-704B for general communications by the Grand Commissioner Secretary;
  3. V000-704C for registration of bank accounts and communication of balances by the Grand Commissioner Secretary;
  4. V000-704D for specialized communications by an approved Committee;
  5. V000-704E for general member communication by the Grand Commissioner General;
  6. V000-704F for communication of ethics by the Grand Commissioner Chaplain;

The associated Virtual Machine may contain a mail server in addition to the website for the purposes of directing communications for these Venues;

Cloudflare

Cloudflare is a permitted vendor for Domain Name System (DNS) services particularly regarding the propagation of A, AAAA, CNAME, MX, and TXT records and the preservation of the integrity of V000-704 from bots, attackers, malicious actors, and the like, and is to be registered under V000-704A;

Paypal

Paypal is a permitted vendor for banking and other financial services necessary to the conduct of Rho Phi with registration under V000-704A given that all actions undertaken thereby are presented by a treasurer and ratified per the standards of Rho Phi;

Porkbun

Porkbun is a permitted vendor of Domain Name System (DNS) related services with regard to V000-704, including but not limited to domain name registration and nameserver (NS) record propagation, particularly as related to Cloudflare nameservers;

Cisco

Cisco is a permitted vendor for propagating web filtering categories to improve web reputation and accessibility of the Rho Phi website submitted with a registered account under V000-704A;

Fortinet

Fortinet and its products are permitted vendors for propagating web filtering categories to improve web reputation and accessibility of the Rho Phi website submitted with identification under V000-704A;

Dovecot

Dovecot is an open-source Internet Message Access Protocol (IMAP) server trusted and permitted to be hosted on V000-704 for the purposes of acting as a Mail Delivery Agent (MDA) and thereby allowing secure access to mail through a Mail User Agent (MUA);

Postfix

Postfix is an open-source Simple Mail Transfer Protocol (SMTP) service trusted and permitted to be hosted on V000-704 for the purposes of acting as a Mail Transfer Agent (MTA) and Mail Submission Agent (MSA);

Mozilla

The Mozilla Foundation’s Thunderbird product is an open-source MUA trusted and permitted for officers to send and view emails using V000-704’s addresses from their own clients;

OpenBSD

The OpenBSD Project’s OpenSSH suite is an open-source Secure Shell (SSH) protocol utility trusted and permitted to provide administrative access from an officer’s client to the V000-704 server; The SSH key to the server is not ever to be stored on V000-704, and should not be shared outside of the Grand Commissioner Secretary, Administrator, and appointed Deputy with duties requiring administrative access to V000-704;

NodeJS

NodeJS is an open-source JavaScript runtime environment trusted and permitted to facilitate the web-accessible content of V000-704;

Caddy

Caddy is an open-source web server trusted and permitted to act as a reverse proxy between internal ports on which apps are hosted on V000-704 and external ports accepting traffic and securing internet traffic through the obtaining, managing, and serving of Transport Layer Security (TLS) certificates;

Linux

Oracle Linux is an open-source Linux Operating System (OS) distribution trusted and permitted to operate, manage, and perform the routine tasks of V000-704;

Pocketbase

Pocketbase is an open-source backend framework permitted to organize and securely store information used for the web-accessible content of V000-704 under registration of V000-704A;

Microsoft

Microsoft and its products in Bing and IndexNow are permitted for use in facilitating, analyzing, and propagating V000-704 under V000-704A.

ANO as E601-600

ANO as E601-600

Rho Phi Logo