So I'm sure everyone has seen my other thread and know how much I hate escrow. The MAIN reason to this is because i am not comfortable putting thousands of dollars into a web persona that is a high profile target for LE. We have been chatting on the SILC channel about this and have come up with a wonderful solution to this problem. It will require a lot of coding, but i would happily donate for development, and I would hope other vendors would as well, as it protects us the most. I would happily use escrow if this system was created.Outline:Use a separate server for escrow. Why? The market server is public. Any and all trace attempts are going be targeted at this server. Use custom programming to have the escrow server communicate with the market server over torspace. This keeps our coins completely autonomous from the marketplace. What is the advantage to this? If LE ever traces the server and seizes it, the coins are not lost. But what if something happens to SR himself? Then the coins are sitting on a server with no one to send them out. Solution: We implement a dead man's switch, similar to the Wikileaks insurance file. There is a system where SR would need to login every couple days, and verify himself. If this does not happen, all funds are automatically distributed out to the backup wallet addresses. Okay, so the market server has been seized, can't they get the escrow server address off the market server? Possibly, I'm sure its all fully encrypted but we know LE can do ram dumps if they get to it while its powered on, which they most likely would as it's a server. Ideally, the dead man's switch would be triggered by the time they were able to trace the escrow server so it wouldn't matter.Problems:Preventing double spends: The two servers would need to be in constant sync. I'm sure this could be accomplished but I'm not sure how.Secure communication between servers: If the market server was hacked, what is stopping the hacker from hijacking the TCP stream and telling the other server to send the entire escrow to himself? It would be necessary for the marketplace to be able to send instructions to the escrow server. This would take a very smart hacker but trust me they do exist.Coins for orders still in transit: Who do they go to? Implement trust levels for proven and unproven vendors. Proven vendors get 100%. Unproven vendors could get a 50/50 split. Hopefully the customers have a backup way to communicate with vendors anyway, and then they can work it out between each other. This isn't ideal but its the best I can come up with.This is simply a brainstorm at this point but it is a great idea. Please post any ideas for improvements, solutions, or any problems you may see in the system. :)