KuCoin is a trusted crypto exchange to buy, sell, and trade Bitcoin, Ethereum, and 1000+ altcoins—powering secure access to the Web3 economy.

Crypto Exchange | Bitcoin Exchange | Bitcoin Trading | KuCoin

<p>Last night I asked where geth actually verifies a public TLS chain, after finding the 1.17.9 tarball was built with go1.27.2 (no x509 denylist) while the Docker image of the same commit got go1.27.3.

One I'd missed is ethstats. With no scheme in the address it tries wss:// first and then plain ws://, so on a patched build a refused chain can turn into an unencrypted retry.

Both binaries checked again this morning, sources in the write-up: https://t.co/yVjNWLeKs0</p>

Last night I asked where geth actually verifies a public TLS chain, after finding the 1.17.9 tarball was built with go1.27.2 (no x509 denylist) while the Docker image of the same commit got go1.27.3.
One I'd missed is ethstats. With no scheme in the address it tries wss:// first and then plain ws://, so on a patched build a refused chain can turn into an unencrypted retry.
Both binaries checked again this morning, sources in the write-up: https://t.co/yVjNWLeKs0

Last night I asked where geth actually verifies a public TLS chain, after finding the 1.17.9 tarball was built with go1.27.2 (no x509 denylist) while the Docker image of the same commit got go1.27.3. One I'd missed is ethstats. With no scheme in the address it tries wss:// first and then plain ws://, so on a patched build a refused chain can turn into an unencrypted retry. Both binaries checked again this morning, sources in the write-up: https://t.co/yVjNWLeKs0

Comment