Chedigital is currently working on a different approach towards a web-wallet platform by creating a "Brain-wallet app" which he proposed in his latest update.
Great update neutral, and thanks for all your hard work man! Transparency is great for all involved.
I have been away due to timelines at work shrinking, and having to jump on a few tasks that were unplanned. Therefore I have not be able to post at my usual pace. Below is a few updates on the state of the ICG web wallet development.
Update
The initial concept was to use a RABBITMQ cluster hosted locally with a live ICG node with actual hot coins, 4 boxes protected behind a firewall, and host the front end of the application in an outside network. While the web wallet approach allow us to roll out a system relatively quickly, its not in the best interest of the ICG community. A centralized web wallet becomes a huge security liability for the ICG community. If the main server were to be compromised all users could potentially loose their coins by any zero day exploit. Just look at all the exchanges that have become insolvent due to hacks or leaks [1].
Going forward, a simpler approach for all involved would be for us to develop a platform based on an offline brain wallet. A brain wallet with an offline app similar to keybase's warp wallet [2], an offline warp wallet that can run on all platforms will give users a secure way to store their coins without having to worry about a centralized server being comprised. A warp wallet approach will allow user to keep their private keys not the server. Everyone can sleep better a night, . [3]
The above approach while more secure will impact our original timelines, so we will be regrouping resources Monday, and release a new updated timeline for a Warp/brain Wallet for ICG that runs on popular mobile platforms & desktop. We have a new member, that has been active on #ICG, who has been helping us organize the development process, and documentation. Anyone else that wants to help, please join us at #ICG, stop by and join the conversation.
[1] https://bitcointalksearch.org/topic/list-of-major-bitcoin-heists-thefts-hacks-scams-and-losses-old-83794 http://www.theguardian.com/technology/2014/mar/18/history-of-bitcoin-hacks-alternative-currency
[2] https://keybase.io/warp/
[3] http://maxtaco.github.io/bitcoin/2014/01/16/how-jason-bourne-stores-his-bitcoin/
-----BEGIN PGP MESSAGE-----
Version: GnuPG v1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=epjM
-----END PGP MESSAGE-----
Sounds interesting. The Brain wallet app idea should allow for a more decentralized and secure process of storing ICG.
It wouldn't be a bad idea to make both a web-wallet and brain wallet app to give users different levels of security and convenience based on their preferences.