myetherwallet.com cloudflare warning

[modrobert]

I was going to try out myetherwallet.com since the official Ethereum 'mist' client seems to be riddled with bugs, based on scripts and 'go' programs which use 'curl' to download binaries straight from github repos without asking for user confirmation.

I had serious doubts about myetherwallet.com since it is a web based wallet, but before even creating a new wallet I noticed the website uses Cloudflare which is a service providing DDOS protection and caching, it is also a HTTPS "man in the middle" (MITM) by definition which had serious information leaks in the past. You can read more about it here:

https://en.wikipedia.org/wiki/Cloudbleed

Many forums uses Cloudflare, and I get why they do that, but it's a bad idea when it comes to a wallet service.

Is there any decent lightweight Ethereum wallet out there?

[mocacinno]

I use my ledger for ETH... I don't know if this is an option for you, but since it only costs like hundred bucks, i personally think it's well worth not having to use a web wallet.

[modrobert]

I use my ledger for ETH... I don't know if this is an option for you, but since it only costs like hundred bucks, i personally think it's well worth not having to use a web wallet.

Thanks for the tip, I couldn't find any price for the software at ledger.com, assuming you mean the hardware wallet they recommend with it?

[mocacinno]

I use my ledger for ETH... I don't know if this is an option for you, but since it only costs like hundred bucks, i personally think it's well worth not having to use a web wallet.

Thanks for the tip, I couldn't find any price for the software at ledger.com, assuming you mean the hardware wallet they recommend with it?

That's correct, i was talking about the hardware wallet. I own a ledger nano S for my altcoins and a trezor for my BTC. Since your private keys never leave your hardware wallet, it should be perfectly safe to use.
Ledger has it's own wallet GUI (at least, they used to have their own wallet, i still have it installed on my home pc), but you can also use it with myetherwallet. If you use it together with myetherwallet, it doesn't really matter if they use cloudflare since your private keys never leave your physical wallet anyways (the only thing that can happen is that cloudflare can link you as a person to an ETH address)

[batang_bitcoin]

Thanks for the tip, I couldn't find any price for the software at ledger.com, assuming you mean the hardware wallet they recommend with it?

The site is https://www.ledger.com/products/ledger-nano-s and shipping is free.

Avoid buying from ebay or amazon just to protect yourself from used nano ledger s. There's a case that someone availed through ebay through a "reputable seller" and lately he found out that all of his founds were gone because private keys that was given to him were printed already and that seller got all of his life savings. Buy directly to the manufacturer or legit partner retailers https://www.ledger.com/pages/retailers

[baonhieumanh00]

I also use Trezor  wallet really safe and effective I think you should use it. And I'm also thinking of buying more Ledger for the experience.

[Adriano2010]

The most sites needs protection against ddos or there atacks. I think if you need more safety go and search some hardware wallets that can be used in combination with myetherwallet. I use ledger nano and until now is ok for me, no problem for more than 8 months. You can also try another hardware wallet and i think is enough for security.

[MadGamer]

Myetherwallet is having a lot of issues and also phishing attacks are targeting that specific domain name. I suggest going with MyCrypto, It's basically the same website with a lot of improvements and brought by MEW developers as well so there should be no trust issues here.