Check a donation address
Every donation address on this site is one of the CCS wallet’s subaddresses, taken from a list made once, offline, from a view-only copy of the wallet, and signed with a key made only for that. The secret key was destroyed right after signing, so no other list can ever carry that signature. The site is checked against the list each time it is made: an address that is not in it is never shown.
You can check it yourself, with nothing from this site but the files below:
-
Download the list, its signature and the public key.
-
Check the key’s fingerprint against the one the CCS maintainers publish elsewhere (in the design repository, in its README), then:
gpg --import subaddresses.txt.key.asc gpg --verify subaddresses.txt.asc subaddresses.txt -
Look for the address you are about to pay to:
grep -c " THE_ADDRESS$" subaddresses.txt1means it is the wallet’s.0means do not send: tell the CCS maintainers.
The key’s fingerprint: 0123 4567 89AB CDEF 0123 4567 89AB CDEF 0123 4567