So newb question to break up all the drama a bit....
what is all this verification to prevent MITM stuff?
ive seen it, but what do I do with it?
thanks
It's there for your peace of mind. It's an optional step that you can use to verify the authenticity of the deposit address prior to sending funds. My guess as to the reasoning is that if a MITM attack was taking place,
the attacker would not posses certain information found in the message and therefore the generated signature from the injected address would not match.
The attacker would not possess the private key associated with that deposit address. Only someone with the private key that corresponds to that deposit address would be able to generate that signature with that message.