1

Dears, If the PHP script and the Bitcoin wallet are on the same computer, does encrypting the link is necessary? like turn ssl on:rpcssl=1

2

It probably doesn't help much.

If the wallet (server) and the script (client) are running on the same computer, and you're connecting to it directly (e.g. on 127.0.0.1), then the data being sent should never reach any external network, and could only be intercepted by the user(s) running those programs, or a system administrator with higher privileges. In most cases, those people would also be able to recover the SSL key, so encryption would not help very much. For that matter, they would also probably be able to recover private keys and other sensitive data directly from the files or memory being used by the programs.

On the other hand, in most cases, RPC has so little traffic that the overhead of encryption is negligible, so it costs you almost nothing to turn it on, and it might make an attacker's job somewhat more difficult.

If your system uses more advanced separation of privileges (e.g. Linux admin capabilities and securelevels) then there might be more situations where someone might have access to local network traffic but not the keys or other sensitive data. In such cases, encryption could make more of a difference.

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.