Ledger Developer Kit Reports Every Signature to Ledger Unless Wallets Opt Out, Developer Says

Cointime reports: Ledger’s developer kit reports every signature to Ledger unless software wallets opt out. Ledger’s security team said the lookups power Clear Signing, occur in software wallet apps rather than on the device itself, and are not stored. The disclosure raises questions about signature data flowing to Ledger by default.