From 9fac3f828f774f2ea436b92138d0321582eef6af Mon Sep 17 00:00:00 2001 From: bjoern Date: Sat, 8 Feb 2025 13:35:09 +0100 Subject: [PATCH] update translations (#1049) * update translations * fix indentation * fix some links * wording --- ca/help.md | 16 ++++++++++++++-- cs/help.md | 16 ++++++++++++++-- de/help.md | 16 +++++++++++++--- es/help.md | 16 ++++++++++++++-- fr/help.md | 16 ++++++++++++++-- gl/help.md | 16 ++++++++++++++-- id/help.md | 16 ++++++++++++++-- it/help.md | 16 ++++++++++++++-- nl/help.md | 16 ++++++++++++++-- pl/help.md | 15 ++++++++++++++- pt/help.md | 16 ++++++++++++++-- pt_BR/help.md | 16 ++++++++++++++-- ru/chatmail.md | 12 ++++++------ ru/help.md | 16 ++++++++++++++-- sk/help.md | 16 ++++++++++++++-- sq/help.md | 16 ++++++++++++++-- tr/help.md | 16 ++++++++++++++-- uk/help.md | 15 ++++++++++++++- zh_CN/help.md | 16 ++++++++++++++-- 19 files changed, 257 insertions(+), 41 deletions(-) diff --git a/ca/help.md b/ca/help.md index f9dc94a20..a501adfce 100644 --- a/ca/help.md +++ b/ca/help.md @@ -772,8 +772,20 @@ For other programs, you should be able to find a solution online. ### Was Delta Chat independently audited for security vulnerabilities? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/cs/help.md b/cs/help.md index 77a72a042..5cdedf577 100644 --- a/cs/help.md +++ b/cs/help.md @@ -767,8 +767,20 @@ Pro ostatní programy by mělo jít nalézt řešení na Interentu. ### Was Delta Chat independently audited for security vulnerabilities? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/de/help.md b/de/help.md index df8ab4be0..048ac833b 100644 --- a/de/help.md +++ b/de/help.md @@ -666,7 +666,7 @@ aber irgendwie nicht Ihre Nachrichten - gleichzeitig aber eine vollständige Auf vergangenen verschlüsselten Nachrichten hat. In jedem Fall verwendet die Ende-zu-Ende-Verschlüsselung von Delta Chat eine [sichere Untermenge von OpenPGP](#openpgp-secure) -das [unabhängig sicherheitsgeprüft] wurde (../assets/blog/2019-first-security-review.pdf). +das [unabhängig sicherheitsgeprüft](../assets/blog/2019-first-security-review.pdf) wurde. ### Kann ich meinen existierenden privaten Schlüssel weiter verwenden? {#importkey} @@ -696,7 +696,17 @@ Für andere Programme können Sie online eine Lösung finden. ### Wurde Delta Chat unabhängig auf Sicherheitslücken geprüft? {#security-audits} -Das Delta-Chat-Projekt wurde in den letzten Jahren fünf unabhängigen Sicherheitsprüfungen und -analysen unterzogen: +Ja, mehrfach. +Das Delta-Chat-Projekt wird kontinuierlich unabhängigen Sicherheitsaudits und -analysen unterzogen: + +- Im Dezember 2024 fand eine [von NLNET in Auftrag gegebene Bewertung von rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) durch [Radically Open Security](https://www.radicallyopensecurity.com/) statt. +rPGP wird für die [OpenPGP](https://openpgp.org)-Ende-zu-Ende-Verschlüsselung verwendet. +Im Zusammenhang mit den Ergebnissen dieser Prüfung wurden zwei Hinweise veröffentlicht: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + Die in diesen Hinweisen beschriebenen Probleme wurden behoben und sind Bestandteil der Delta Chat Veröffentlichungen in allen Appstores seit Dezember 2024. - Im März 2024 erhielten wir von der Forschungsgruppe "Applied Cryptography" der ETH Zürich eine umfassende Sicherheitsanalyse und haben alle aufgeworfenen Fragen adressiert. Weitere Informationen finden Sie in unserem Blogbeitrag über [Hardening Guaranteed End-to-End encryption](https://delta.chat/en/2024-03-25-crypto-analysis-securejoin) und in der hinterher publizierten [Kryptografischen Analyse von Delta Chat](https://eprint.iacr.org/2024/918.pdf) @@ -709,7 +719,7 @@ Weitere Informationen finden Sie in unserem Blogbeitrag über [Hardening Guarant Es wurden keine kritischen oder hochgradig gefährlichen Probleme gefunden. Der Bericht wies auf einige Schwachstellen mittlerer Schwere hin - sie stellen für sich genommen keine Bedrohung für Delta-Chat-Benutzer dar, da sie von der Umgebung abhängen, in der Delta Chat verwendet wird. Aus Gründen der Benutzerfreundlichkeit und der Kompatibilität können wir nicht alle Schwachstellen beseitigen und haben beschlossen, Sicherheitsempfehlungen für bedrohte Benutzer zu geben. Sie können den [vollständigen Bericht hier](../assets/blog/2020-second-security-review.pdf) lesen. - Im Jahr 2019 analysierte [Include Security](https://includesecurity.com) die von Delta Chat verwendeten [PGP-](https://github.com/rpgp/rpgp) und [RSA-](https://github.com/RustCrypto/RSA) Bibliotheken. -Es wurden keine kritischen Probleme gefunden, aber zwei Probleme mit hohem Schweregrad, die wir anschließend behoben haben. Außerdem wurden ein mittelschweres und einige weniger schwerwiegende Probleme gefunden, aber es gab keine Möglichkeit, diese Schwachstellen in der Delta-Chat-Implementierung auszunutzen. Einige dieser Schwachstellen haben wir dennoch nach Abschluss des Audits behoben. Sie können den [vollständigen Bericht hier] lesen (../assets/blog/2019-first-security-review.pdf). +Es wurden keine kritischen Probleme gefunden, aber zwei Probleme mit hohem Schweregrad, die wir anschließend behoben haben. Außerdem wurden ein mittelschweres und einige weniger schwerwiegende Probleme gefunden, aber es gab keine Möglichkeit, diese Schwachstellen in der Delta-Chat-Implementierung auszunutzen. Einige dieser Schwachstellen haben wir dennoch nach Abschluss des Audits behoben. Sie können den [vollständigen Bericht hier](../assets/blog/2019-first-security-review.pdf) lesen. diff --git a/es/help.md b/es/help.md index 55c49d3a5..12cabcd40 100644 --- a/es/help.md +++ b/es/help.md @@ -730,8 +730,20 @@ For other programs, you should be able to find a solution online. ### ¿Se auditó Delta Chat de forma independiente en busca de vulnerabilidades de seguridad? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/fr/help.md b/fr/help.md index 0d5d8f906..864655d25 100644 --- a/fr/help.md +++ b/fr/help.md @@ -743,8 +743,20 @@ Pour les autres programmes, vous devriez pouvoir trouver la solution en ligne. ### Est-ce qu'un audit indépendant des failles de sécurité a été réalisé sur Delta Chat ? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/gl/help.md b/gl/help.md index e738768a0..9ee21ec1e 100644 --- a/gl/help.md +++ b/gl/help.md @@ -772,8 +772,20 @@ For other programs, you should be able to find a solution online. ### Was Delta Chat independently audited for security vulnerabilities? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/id/help.md b/id/help.md index 1e971031c..cefa8ec3b 100644 --- a/id/help.md +++ b/id/help.md @@ -772,8 +772,20 @@ For other programs, you should be able to find a solution online. ### Was Delta Chat independently audited for security vulnerabilities? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/it/help.md b/it/help.md index 238654cf2..1756a3408 100644 --- a/it/help.md +++ b/it/help.md @@ -761,8 +761,20 @@ Per altri programmi, dovresti essere in grado di trovare una soluzione online. ### Delta Chat è stata verificata in modo indipendente per le vulnerabilità di sicurezza? {#security-audits} -Il progetto Delta Chat è stato sottoposto a quattro controlli di sicurezza indipendenti e -un'analisi di sicurezza indipendente, dal più recente al più vecchio: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - Marzo 2024, abbiamo ricevuto un'analisi approfondita della sicurezza dalla Crittografia Applicata gruppo di ricerca dell'ETH di Zurigo e ha affrontato tutte le questioni sollevate. diff --git a/nl/help.md b/nl/help.md index 6ad985000..6c7713027 100644 --- a/nl/help.md +++ b/nl/help.md @@ -765,8 +765,20 @@ Voor andere programma's kun je zélf een oplossing zoeken op internet. ### Heeft Delta Chat ooit onafhankelijke beveiligingscontroles ondergaan? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/pl/help.md b/pl/help.md index 0177a0773..4548e002b 100644 --- a/pl/help.md +++ b/pl/help.md @@ -443,7 +443,20 @@ W przypadku innych programów można znaleźć rozwiązanie online. ### Czy Delta Chat był niezależnie kontrolowany pod kątem luk w zabezpieczeniach? {#security-audits} -Projekt Delta Chat przeszedł cztery niezależne audyty bezpieczeństwa i jedną niezależną analizę bezpieczeństwa, od najnowszego do najstarszego: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - W marcu 2024 r. otrzymaliśmy dogłębną analizę bezpieczeństwa od grupy badawczej ds. kryptografii stosowanej w ETH Zuerich i zajęliśmy się wszystkimi poruszonymi kwestiami. Więcej szczegółowych informacji można znaleźć na naszym blogu na temat [szyfrowania typu End-to-End z gwarancją Hardening](https://delta.chat/en/2024-03-25-crypto-analysis-securejoin) oraz opublikowanym później artykule badawczym [Cryptographic Analysis of Delta Chat](https://eprint.iacr.org/2024/918.pdf). diff --git a/pt/help.md b/pt/help.md index 492a9af48..7b5045bf8 100644 --- a/pt/help.md +++ b/pt/help.md @@ -766,8 +766,20 @@ Para outros programas, você deveria achar uma solução online. ### Was Delta Chat independently audited for security vulnerabilities? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/pt_BR/help.md b/pt_BR/help.md index bf8dd1a2f..42471c57b 100644 --- a/pt_BR/help.md +++ b/pt_BR/help.md @@ -766,8 +766,20 @@ Para outros programas, você deveria achar uma solução online. ### Was Delta Chat independently audited for security vulnerabilities? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/ru/chatmail.md b/ru/chatmail.md index 2a22eb1e1..40a6416de 100644 --- a/ru/chatmail.md +++ b/ru/chatmail.md @@ -50,7 +50,7 @@ lang: ru ## В чем разница между серверами chatmail и серверами обычной электронной почты? -Серверы chatmail представляют собой упрощенные серверы электронной почты, разработанные для обеспечения скорости, безопасности и удобства: +Серверы chatmail представляют собой упрощённые серверы электронной почты, разработанные для обеспечения скорости, безопасности и удобства: - **Удобство:** Автоматическое подключение за несколько секунд и получение push-уведомлений @@ -58,7 +58,7 @@ lang: ru - **Скорость:** Мгновенная доставка сообщений, менее секунды, от отправителя до получателя -- **Надежность:** Нет раздражающих проверок на спам или ограничений скорости. +- **Надёжность:** Нет раздражающих проверок на спам или ограничений скорости. - **Безопасность:** Исходящие сообщения зашифрованы сквозным шифрованием, а входящие сообщения строго проверяются на подлинность. @@ -72,12 +72,12 @@ lang: ru Delta Chat обеспечивает [гарантированное сквозное шифрование](https://delta.chat/en/2023-11-23-jumbo-42) что означает, что в большинстве случаев операторы сервера не смогут прочитать ваши сообщения, даже если попытаются это сделать. -Эта гарантия подтверждена недавним [анализом безопасности Швейцарской высшей технической школой Цюриха](https://delta.chat/en/2024-03-25-crypto-analysis-securejoin). +Эта гарантия подтверждена недавним [анализом безопасности ETH Zurich Швейцарской высшей технической школой Цюриха](https://delta.chat/en/2024-03-25-crypto-analysis-securejoin). -## Как работают серверы chatmail? Можно ли запустить свой собственный сервер chatmail? {#selfhosted} +## Как работают серверы chatmail? Могу я запустить свой собственный сервер chatmail? {#selfhosted} -Все серверы chatmail автоматически развертываются и обновляются с помощью +Все серверы chatmail автоматически развёртываются и обновляются с помощью [публичного репозитория разработки chatmail](https://github.com/deltachat/chatmail). Серверы chatmail состоят из проверенных стандартных компонентов сервера электронной почты, [Postfix](https://postfix.org) и [Dovecot](https://dovecot.org), @@ -94,4 +94,4 @@ Delta Chat обеспечивает [гарантированное сквозн Чтобы поддержать развитие chatmail и работу сервера по умолчанию вы можете внести свой вклад. -[Пожертвование](donate){: .cta-button} +[Пожертвовать](donate){: .cta-button} diff --git a/ru/help.md b/ru/help.md index 4ccc38f99..f3a973b80 100644 --- a/ru/help.md +++ b/ru/help.md @@ -769,8 +769,20 @@ Delta Chat не будут иметь никакого ключа, прежде ### Проходил ли Delta Chat независимую проверку на наличие уязвимостей безопасности? {#security-audits} -Проект Delta Chat прошёл четыре независимых аудита безопасности и один -независимый анализ безопасности, от самого последнего к более старому: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - В марте 2024 года мы получили подробный анализ безопасности от исследовательской группы Applied Cryptography в ETH Цюрихе и устранили все выявленные проблемы. diff --git a/sk/help.md b/sk/help.md index 64b026952..9e566cd98 100644 --- a/sk/help.md +++ b/sk/help.md @@ -772,8 +772,20 @@ Pre iné programy by ste mali vedieť nájsť riešenie online. ### Was Delta Chat independently audited for security vulnerabilities? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/sq/help.md b/sq/help.md index 7fbc41554..87aa251c1 100644 --- a/sq/help.md +++ b/sq/help.md @@ -774,8 +774,20 @@ Për programe të tjera, mund të gjeni një zgjidhje në internet. ### A është bërë auditim i pavarur i Delta Chat-it për cenueshmëri sigurie? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/tr/help.md b/tr/help.md index 494b81d9c..df0140732 100644 --- a/tr/help.md +++ b/tr/help.md @@ -771,8 +771,20 @@ For other programs, you should be able to find a solution online. ### Was Delta Chat independently audited for security vulnerabilities? {#security-audits} -The Delta Chat project underwent four independent security audits and one -independent security analysis, from most recent to older: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 March, we received a deep security analysis from the Applied Cryptography research group at ETH Zuerich and addressed all raised issues. diff --git a/uk/help.md b/uk/help.md index 9e450b050..ad40617b5 100644 --- a/uk/help.md +++ b/uk/help.md @@ -443,7 +443,20 @@ Delta Chat підтримує поширені формати приватних ### Чи проходив Delta Chat незалежний аудит на наявність вразливостей у безпеці? {#security-audits} -Проект Delta Chat пройшов чотири незалежні аудити безпеки та один незалежний аналіз безпеки, від найновіших до найстаріших: +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 березня ми отримали глибокий аналіз безпеки від дослідницької групи Applied Cryptography дослідницької групи з прикладної криптографії в ETH Zuerich і вирішили всі порушені питання. Більш детальну інформацію можна знайти в нашому блозі в статті [Hardening Guaranteed End-to-end encryption](https://delta.chat/en/2024-03-25-crypto-analysis-securejoin), а також в дослідженні [Cryptographic Analysis of Delta Chat](https://eprint.iacr.org/2024/918.pdf), опублікованому пізніше. diff --git a/zh_CN/help.md b/zh_CN/help.md index 574d6ebc5..4f4d641a3 100644 --- a/zh_CN/help.md +++ b/zh_CN/help.md @@ -705,8 +705,20 @@ Delta Chat 支持常见的 OpenPGP 私钥格式。然而，不可能使每种来 ### Delta Chat 是否已进行独立的安全漏洞审计？ {#security-audits} -Delta Chat 项目经历了四次独立的安全性审计和一次 -独立的安全性分析，从最近到最旧： +Yes, multiple times. +The Delta Chat project continuously undergoes independent security audits and analysis, +from most recent to older: + +- 2024 December, an [NLNET-commissioned Evaluation of + rPGP](https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf) by [Radically Open Security](https://www.radicallyopensecurity.com/) took place. + rPGP serves as the end-to-end encyption [OpenPGP](https://openpgp.org) engine of Delta Chat. + Two advisories were released related to the findings of this audit: + + - ["Panics on Malformed Untrusted Input"](https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv) CVE-2024-53856 + - ["Potential Resource Exhaustion when handling Untrusted Messages"](https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285) CVE-2024-53857 + + The issues outlined in these advisories have been fixed and are part of Delta Chat + releases on all appstores since December 2024. - 2024 年 3 月，我们收到了苏黎世联邦理工学院应用密码学 研究小组的深入安全性分析，并解决了所有提出的问题。