Two issues:
1. When downloading software, I like the site to automatically use the secure protocol https://. When I click to download namecoin, http://dot-bit.org does not redirect me to the https:// protocol. This means a man-in-the-middle attack is much easier-- someone in the middle could replace the legitimate software with a copy that steals my keys.
2. I'm fairly sure you know about this already, but the SSL certificate for https://dot-bit.org is expired! I manually tried to use it to download the software, but my browser warns that it expired in 2012.
This gives me a lot of pause. Crypto-based projects should be on top of these issues!
Insecure downloads! dot-bit.org SSL certificate expired!
-
- Posts: 1
- Joined: Tue May 07, 2013 3:04 pm