Tchap (messenger)

2019: Start of the messenger

On April 18, 2019 the French government started the new messenger for public servants, but in several hours it was revealed that the application has serious problems in terms of security.

The Tchap service available to platforms iOS and Android, should replace with the government employee, to authorities and some private organizations popular means of communication, such as Telegram Signal WhatsApp, to Wickr and volume similar. It was supposed that the new messenger will have similar functions with end-to-end data encryption. However errors of developers allow any user to be registered in the application and to spy on government correspondence. It is enough to malefactor to add only the state domain over normal for registration in the application, for example, of name@domain.com@french-government-domain.com.

France started the messenger for state agencies, but protected it did not turn out

This problem was revealed by the independent specialist in the field of cyber security of Baptiste Robert. Apparently, the error contains in the code as which basis the known client-server IM packet with the open code Riot was taken. According to the ZDNet edition, the Matrix company developing Riot fixed a problem, and the patch will be available to Tchap in the nearest future.

Since summer of 2018 specialists of Interdepartmental management of digital information systems and communications (DINSIC) under control of the National agency of France on security of information systems (ANSSI) were engaged in development of Tchap. The source code Tchap is laid out on GitHub so other organizations will be able to create with its help own versions of the messenger for internal use. The French agency of cyber security adheres to such policy for many IT projects.^[1]

You watch also (messengers)

Notes