https://www.zdnet.com/article/french-government-releases-in-house-im-app-to-... French government open-sources in-house-made end-to-end encryption IM app named Tchap. [...] But despite the French government's plans, the app's launch didn't go as planned. On the same day it was released, French security researcher Baptiste Robert found a security flaw in Tchap that would have allowed anyone to register an account and spy on the French government's internal communications. The researcher found that by adding a government email domain on top of his regular email, like so name@domain.com@french-government-domain.com, he could register on the app, even when not being authorized to do so.