Quote from: paraipan on June 07, 2013, 08:27:15 PM

Quote from: CoinGuard on June 07, 2013, 07:56:35 PM

...

Kato, I've implemented Casascius cryptographic escrow into an easy to use web service that doesn't need any 3rd party intervention. So two people could transact between each other and handle escrows themselves without having to trust a 3rd party. I don't save the wallet addresses, payment codes, or private keys to the database. I don't want to highjack the thread just wanted to point that out.

Lol, how is that? Please enlighten us how your web service works.

Because the important part of the process is generated by the user client side. So say a buyer needs to setup an escrow, they would generate their escrow code A. Input that escrow code A into step 2 to generate a wallet address and payment code. hit complete the escrow transaction and send an email to the other party with the details of the transaction. Send another email to themselves with the escrow details. Originating user never sees the escrow code B, all we store is the two escrow codes and corresponding emails. Thats all we need it's based on a 3 key transaction to unlock the funds. Both users have 2 pieces of the puzzle (Buyer - Escrow Code A, Payment Code, Wallet Address) (Seller - Escrow Code B, Payment Code, Wallet Address) (Coinguard - Escrow Code A, Escrow Code B, Email1, Email2)

I designed the system so I can never see what the wallet address or payment code are. I knew this would be a sticking point for users and in general the safety of the site. Because if I stored everything it allow people to hack the site, and so I never can ever run with funds. I don't even know what the addresses of the wallets are, nor the private key. But that also means that if you lose a piece of the escrow I can't help you because none of that info was stored.

I know many will be skeptical but if people don't test it out how will trust ever be established. People don't have to put btc in the test escrow account to kick the tires to see how the service works.

I can easily provide a screenshot of the db tables that are stored. I will even give a trusted member access to the backend to validate I'm telling the truth.

I would even invite casascius to try it out, and I think he would be pleasantly surprised.

CoinGuard

Posts

Merits