Bitcoin Forum

i need for a list of electrum servers. verified servers from electrum. or if it's posted already, send me its thread link please. thanks.

This link is from https://electrum.org/#community :

https://1209k.com/bitcoin-eye/ele.php

Never used it though

The list above is of all servers registered (anyone can add their server for monitoring purposes). Not “trusted” servers.

Also, there shouldn’t really be a list of trusted servers simply because you shouldn’t blindly trust any of them. Anyone can run a server and any server can be compromised at any time.

All the servers can do is get your IP and addresses list, so it’s more about privacy than security.

Kinda confusing since it is a link from Electrum.org and when you open it, it says "monitored servers" on the top.
Could be misleading for users that are not very experienced.

Maybe it should be mentioned on the Electrum website that those are not trusted servers.

Just a tip.

There are no verified servers. Even the ones in the default list are being bought out by scammers. Use 3.3.4 and you won't be vulnerable to phishing scams although you may have to learn to change servers (https://bitcoinelectrum.com/how-to-switch-to-a-different-electrum-server/).

there is no trusted list but you can find a list of servers in source code: https://github.com/spesmilo/electrum/blob/master/electrum/servers.json

the list is not new and there is no such thing as "trusted server list" otherwise it would centralize things.
what this list is, is that like any other peer to peer application it needs to initially have a list of IP addresses to connect to so that in first attempt it becomes possible to connect to the network. then your client keeps a list and updates it.

Additionally, trust isn't equal security. Latest commit which change server.json file shows there was 1 phishing server which is removed.

i may be missing something in the code but it doesn't look like there is any criteria such as ping,... that you mentioned here. it is simply a random server from the list of servers. it just filters the list based on the protocol used then picks a random one from the resulting list using random.choice():
https://github.com/spesmilo/electrum/blob/52f8aafb604d05487a0612f65bacb966c0d0f569/electrum/network.py#L134-L142

There is a security issue imo, because a) the server's node could work with a fork and b) it could be targeting someone to make him think he received funds that he did not.

There is a list of banned and trusted servers before on Electrum but I couldn't find it they posted them due to an old issue(Phishing attack).

Anyway, I think if you are looking for a more secured connection with a server then only choose a server with protocol SSL which is way more secured than TCP servers.

It is not trivial for an electrum server to falsely tell a client that it has received a transaction. Electrum clients will connect to 10 servers by default, and will receive block headers from each. This means that an electrum server would need to use enough PoW to make the client believe they are being provided information about the longest blockchain (the chain with the most total work).

As a result of the above, I would put the risk of being provided false information from electrum servers in line with the risk of accepting transactions with x number of transactions with a full node.

If the elctrum server provides a valid transaction to the client, the client could trivially broadcast the transaction to the rest of the network.

The targeting would be very difficult though because all computers are still connecting to the internet using IPV4 (the addresses of which are being rationed to ISPs, resulting in everyone on a particular ISP being put behind a handfull of address aka. NAT), so the IP address alone cannot determine the identity of a user/computer, especially since the IP addresses are continually rotated by the ISPs. So the same user might get a different IP tomorrow.