Ledger’s Developer Kit Reports Every Signature to Ledger Unless Wallets Opt Out, Ambire Developer Says
By Unchained
AI summary of the source article
An Ambire developer reported that Ledger's signing SDK transmits signature details to Ledger servers by default. Ledger's security team stated the transmission is part of its Clear Signing system to look up descriptor files and that it does not retain the data.
Key facts
- Ambire developer Kaloyan Kosev stated Ledger's signing SDK sends signature details to a Ledger server by default since version 1.16.
- Ledger's security team stated the data is transmitted to look up Clear Signing descriptor files on its servers and is not retained.
- Ledger Donjon and SlowMist confirmed that the reporting code resides in the SDK rather than in the device firmware.
Source excerpt · Unchained
Ledger's security team says the lookups power Clear Signing, happen in software wallet apps install rather than on the device itself, and aren't stored. The post Ledger’s Developer Kit Reports Every Signature to Ledger Unless Wallets Opt Out, Ambire Developer Says appeared first on Unchained .