Hacker News Reader

Tchap isn’t a disaster at all. There was one auth bug (thanks to a bug in python’s email validator) which meant that signup wasn’t locked to @gouv.fr email addresses, exposing public chatrooms, which was fixed within about 4h of being reported - before the service was launched.

View on HN

I just checked their Web sign-up page at https://www.tchap.gouv.fr/#/register: "This password is too weak. It must include a lower-case letter, an upper-case letter, a number and a symbol and be at a minimum 8 characters in length."

If eight chars is the minimum, guess how complex and secure are most of Tchat users' passwords :-)).

Reply on news.ycombinator.com