Insecure downloads! dot-bit.org SSL certificate expired!

Post Reply
scientastic
Posts: 1
Joined: Tue May 07, 2013 3:04 pm

Insecure downloads! dot-bit.org SSL certificate expired!

Post by scientastic »

Two issues:

1. When downloading software, I like the site to automatically use the secure protocol https://. When I click to download namecoin, http://dot-bit.org does not redirect me to the https:// protocol. This means a man-in-the-middle attack is much easier-- someone in the middle could replace the legitimate software with a copy that steals my keys.

2. I'm fairly sure you know about this already, but the SSL certificate for https://dot-bit.org is expired! I manually tried to use it to download the software, but my browser warns that it expired in 2012.

This gives me a lot of pause. Crypto-based projects should be on top of these issues!

Post Reply