Bitcoin Forum

I am getting this warning lately while using Electrum from my AV and was just wondering if it something serious and what exactly is causing this and what can be done to stop this?

This is what it says:

https://i.imgur.com/ntwIyLV.png
https://i.imgur.com/FFvJct4.png

Of-couse I did not add the exclusion but would like to know what's going on?

I think its flagging that the electrum server your connecting to is using a self signed certificate. Nothing to worry about as all servers do.

Something must be wrong because it started doing that recently, it is asking to add an exclusion while it did nothing like this before. I'll see from now 'manually' which servers are doing this and avoid them.

nothing to worry about probably , it happened to me as-well several times while using Bitcoin Core . As the user above stated it's related to the server you are connected !!

It probably is nothing, maybe I am being paranoid but just for safety sake I am avoiding servers which ask to add this exclusion. I wish there was a way to remove them from my electrum but don't know how to achieve that.

Heh, that's my server. This is perfectly normal and part of the process to setup an Electrum server (https://github.com/spesmilo/electrum-server/blob/master/HOWTO.md#step-8-create-a-self-signed-ssl-cert). I've been considering getting a publicly trusted cert, but it's really a non-issue.

Electrum gets the list of servers from an IRC channel (where servers announce themselves, if the operator chooses to), so you can't change that. If you want to avoid that error you could switch to non-SSL (meh).

Looking at Avast docs, you can tell Avast's "Web Shield" to ignore Electrum (https://www.avast.com/faq.php?article=AVKB168#idt_03).

This or allow the exception then it will trust that cert for that address. If it changes in the future it will error again :). I'm also thinking of getting a publicly signed one lol

The weird thing is that it never does that with any other servers, I am trying them manually. Maybe I am being paranoid but for now I'll just avoid servers which are giving such warnings, even if its nothing.

Weird indeed. To clarify, it's giving you that warning for my server (btc.smsys.me) only?

Its normal for self signed certs, it also happens on webpages. It just means you need to verify the cert yourself instead of a cert authority doing it for you.

Yeah, I'm well aware. I'm remarking that it's odd since it appears he gets that warning on only a few servers, considering seemingly most servers are self-signed (I haven't verified).

Would you mind checking mine and letting me know if it does the same? Mine is self signed you see. its. electrumserv.noip.me port 50002 for SSL :)

For now, yes, I have only seen that warning popped when electrum connects to that server. If I get any warnings with any other server I'll add the screenshot in the OP.


Will do and let you know.

Hmm, well, if you want to verify that there's no eavesdropping, then check that the thumbprint (bottom of Details tab) is E2 1E 3B F5 EE D9 70 E4 57 4C B0 DD 92 D1 D1 91 7C 34 8F FA. You can confirm the exception if it matches. I would just exclude Electrum from Avast Web Shield though. There's nothing it can do to help with Electrum.

Okay, will do.

@dan91 no warning in yours.

As others said, its probably nothing, just a false alarm maybe, thanks to everyone for their help.

Closing thread.