If server changes SSL certificate client will no longer connect to server

[guruvan]

This is a well known issue/feature of Electrum, however it's confusing to users and not clear to new server operators, and can render a single server chain completely inoperable for and Electrum or Encompass client.

As a feature, it does provide the server operator the ability to use self-signed certs, while providing the client a modicum of security by refusing to connect to a server with a changed certificate.

An alternate method of authenticating servers should be implemented, allowing the use of selfsigned SSL certificates for encryption, but not relying on them for authentication.

---

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.