How can I verify that a Monero Block explorer is not under a MITM attack?

Question

How can I verify that a Monero Block explorer is not under a MITM attack? Aside com comparing the most recent block height and block hash with another blockchain explorer what else can I do?

This question is not meant to be specific to any particular Blockchain explorer but I am interested in how the answer varies (if at all) for clearnet vs Tor usage.

score 7 · Accepted Answer · edited Apr 13 '17 at 12:53

7

You can use MoneroPulse in your own node, start enforcing checkpoints with the --enforce-dns-checkpoining flag in bitmonerod, this means even in the event of a network attack you are following consensus and won't fall in a wrong fork, to compare the Block Explorer height and difficulty with yours in the clearnet or TOR, use the commands status and diff in the bitmonerod window.

edited Apr 13 '17 at 12:53

Community

1

answered Aug 23 '16 at 15:58

2

status won't tell you if you are under a MITM attack, diff will though. – dEBRUYNE Aug 23 '16 at 15:59

score 4 · Answer 2 · edited Aug 27 '16 at 19:26

4

This is not really Monero specific. You would do the usual. Try HTTPS (it cuts down on the number of attacks), check with and without Tor, maybe even with more than one exit node, and compare certificates. If the explorer does not support HTTPS, you could diff the HTML you got from Tor and non Tor connections, and check the only changes are things like timestamps etc.

edited Aug 27 '16 at 19:26

jwinterm

4,403
1
20
34

answered Aug 25 '16 at 23:10

user36303

34,858
2
57
123

How can I verify that a Monero Block explorer is not under a MITM attack?

2 Answers2