7 ms·

Last time they tried to roll their own secure messaging (Tchap based on Matrix), it was a disaster. https://techcrunch.com/2019/04/19/security-flaw-in-french-g

Last time they tried to roll their own secure messaging (Tchap based on Matrix), it was a disaster. https://techcrunch.com/2019/04/19/security-flaw-in-french-government-messaging-app-exposed-confidential-conversations/ https://techcrunch.com/2019/04/19/security-flaw-in-french-go... Secure messaging doesn't have to be that lousy. Download XX messenger from your phone app store, or build it yourself from source. https://xx.network/messenger/ https://xx.network/messenger/

Arathorn 4y ago
Tchap isn’t a disaster at all. There was one auth bug (thanks to a bug in python’s email validator) which meant that signup wasn’t locked to @gouv.fr email addresses, exposing public chatrooms, which was fixed within about 4h of being reported - before the service was launched.
- antisocialist 4y ago
  I just checked their Web sign-up page at https://www.tchap.gouv.fr/#/register https://www.tchap.gouv.fr/#/register: "This password is too weak. It must include a lower-case letter, an upper-case letter, a number and a symbol and be at a minimum 8 characters in length." If eight chars is the minimum, guess how complex and secure are most of Tchat users' passwords :-)).