Hacker News Reader

Last time they tried to roll their own secure messaging (Tchap based on Matrix), it was a disaster.

https://techcrunch.com/2019/04/19/security-flaw-in-french-go...

Secure messaging doesn't have to be that lousy. Download XX messenger from your phone app store, or build it yourself from source.

https://xx.network/messenger/

View on HN

Tchap isn’t a disaster at all. There was one auth bug (thanks to a bug in python’s email validator) which meant that signup wasn’t locked to @gouv.fr email addresses, exposing public chatrooms, which was fixed within about 4h of being reported - before the service was launched.

I just checked their Web sign-up page at https://www.tchap.gouv.fr/#/register: "This password is too weak. It must include a lower-case letter, an upper-case letter, a number and a symbol and be at a minimum 8 characters in length."

If eight chars is the minimum, guess how complex and secure are most of Tchat users' passwords :-)).

Reply on news.ycombinator.com