Interesting, I assume you have tested this somewhat? I would speak to a few of the core devs to verify this is safe/secure
Yes, maybe I will post in the technical section for anyone interested in discussing security aspects.
The techniques we use are all standard cryptographic techniques. ECDH, DLP (Discrete Logarithm Problem) and secure hashing functions for anyone who wants to google, and we have tested everything as thoroughly as we can without a problem, which is why we’re putting it out there for further testing.
The website is designed to fulfil a few different functions and you can pick and choose which you use.
FIRSTLY It is an easy way to negotiate agreements, with a simple interface. It has all of the functionality that you would use in an everyday negotiation, such as the ability to withdraw offers and the ability to negotiate amendments to the original contract. There is a discussion box for each contract so you can have a live discussion while you draft the agreement. If it goes into dispute the arbitrator can join the discussion. Multi-signature isn’t very effective if you don’t know what you’re signing or agreeing to!
(if you want to test the site and don’t know someone with another user name to try a dummy contract with, then you can just register two user names and use two different browsers, say Safari and Chrome, to try negotiating a contract with yourself to demonstrate the functionality)
SECONDLY, It aims to be a marketplace for arbitrators. A place where you can find independent third parties in case there is any problem with a transaction. At the moment there are no restrictions on who can become an arbitrator so you have to satisfy yourself of their independence and authenticity.
THIRDLY, we have the built in system for creating a crowex address that can be used for the transaction. This system handles all of the cryptographic operations and everything can be done offline for extra security.
If for any reason you don’t want to use the crowex address, then you could just use the website to negotiate a contract and choose an arbitrator and use your own multi-sig wallets for the payments. Similarly a traditional escrow service that actually holds the funds could still become an arbitrator on our site and customers of that service could still use the site to make their agreements and interact with the traditional escrow service.
