Skip to content

Validate SSL certificate for electrum servers #523

Open

Description

@danrmiller

There is no warning given if a TLS certificate for an electrum server is self-signed, expired, etc. Please add a warning, show fingerprint, and allow user to choose if they want to still connect, in a similar manner to how its handled for monero servers.

Activity

  1. sneurlax commented on May 25, 2023

    @sneurlax
    Member

    Without adding too much additional UI, we could add an advanced setting to accept bad certificates. It'd be better to add it with a more intuitive design, but that could be a minimalist change which could add some safety while still preserving the ability to connect to servers with bad or self-signed certificates

  2. sneurlax commented on May 25, 2023

    @sneurlax
    Member

    Without adding too much additional UI, we could add an advanced setting to accept bad certificates. It'd be better to add it with a more intuitive design, but that could be a minimalist change which could add some safety while still preserving the ability to connect to servers with bad or self-signed certificates

    nvm, having discussed this, it'd probably be better to do what we do for monero or else show a dialog/modal

  3. danrmiller commented on Jun 21, 2023

    @danrmiller
    CollaboratorAuthor

    Oops, I somehow forgot there was already #245. I'll close that one since unlike this one it has no discussion.

  4. self-assigned this
    on Jul 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions