DoD’s own rules don’t say, “don’t share classified info on Signal.” They say, “Don’t share non-public info on Signal” (meaning, info that hadn’t been cleared for public release). A month before the texts, the NSA had issued a bulletin saying that Signal had vulnerabilities that were being exploited by Russian cyber assets . The week of the texts, the DoD sent out a similar warning bulletin.

This was malpractice. It’s basically what Hillary did.