joeyh

electrum insecure use of ssl

joeyh at

https://github.com/spesmilo/electrum/issues/1782
https://github.com/spesmilo/electrum/issues/1783

At this point, I'm not particularly suprised when a program turns out to utterly fail at SSL cert validation. Because that seems to be how SSL libraries are designed to be misused. OTOH, this is a program I've entrusted with a few thousand dollars in the past. If I own bitcoin again, I'll have to think twice about using Electrum.

Jakukyo Friel likes this.

Jakukyo Friel shared this.