LedgerHQ / ledger-wallet-chrome

Ledger Wallet Chrome application
http://www.ledgerwallet.com/apps/bitcoin
MIT License
161 stars 118 forks source link

Fix possible MITM phishing attack in Ledger Wallet Chrome #114

Open ipsBruno opened 5 years ago

ipsBruno commented 5 years ago

ALWAYS make your requests on HTTPS to prevent MITM Attack

Many Ledger customers use their wallets in Malls, Hotels, etc

https://github.com/ipsBruno/ledger-wallet-chrome/commit/ddb70869d1bc352526c4236cfdab9298047681d3

https://github.com/LedgerHQ/ledger-wallet-chrome/blob/89e8ae3446556dece6f5464e41088bfc85ec4b76/app/src/controllers/wallet/send/wallet_send_index_dialog_view_controller.coffee (lines 33,36)

Thank you