[arfonzo]

Ahoy!

Thanks for the updates Steve.

Would it be useful to add a checksum of the JSON file somewhere, such as on github as an added layer of security?

My concern is the capability for someone to falsify the JSON data mid-stream. I am not sure whether this is still possible, but MITM via a hostile HTTP(s) proxy could result in charity addresses being modified, so staking for charity is sent to an alternate address.

Of course, anyone can modify the sources to do that, but we need to draw a line somewhere: trusted binary? trusted web browsers (i.e., they won’t let us visit invalid HTTPS cert sites anymore)? What are your thoughts on that?

Great progress all!
arfonzo

[Author]

Posts