Does stratum mining use something similar to "https" to secure traffic between the pool and the miners?
1 Answer
No, all traffic is plaintext. The connections are hijackable and attacks against this have occurred in the past where ISPs redirected hashrate to themselves.
-
Really? So there is no way to have username/password logins for the stratum miners either I guess (if it's all plaintext). Commented Dec 7, 2017 at 4:05
-
They have logins, but it’s all in plaintext so can be stolen by observers or redirected.– ClarisCommented Dec 7, 2017 at 4:26
-
Oh. Do you know a more secure mining method for pools? And how many miners can that method handle on one pool? Commented Dec 7, 2017 at 5:01
-
You can wrap a normal stratum socket (or any tcp connection) with SSL using
stunnel, but this needs to be supported by the pool as well as the client. As far as I know nobody does this presently.– ClarisCommented Dec 7, 2017 at 5:06 -
Thank you but my question was if you know a more secure (than stratum) mining method for pools, and how many miners such pools can handle. I worry about HTTP because I'm not sure if they handle https and I hear that they don't handle lots of miners at one time. Commented Dec 7, 2017 at 8:04