This is just general stuff off the top of my head. I know others covered this, but I havent considered metamask yet. it is actually on my security review todo list.
If I get time (I probably wont), but this info is still really useful if someone could do it please) I am not too familiar with the specifics of each of the different applications of this idea.
You have listed a number of “web based local generation” pojects, but i am doubtful they all work identically.
So far you have listed 3 of the downsides of general wallets.
You have missed a lot, i.e. server security, MITM, phishing attacks, vhosts, DNS attacks, network observers, machine admins (think hostile work/machine environments), local file access, local ram access (these dont have to lead to security issues but they need to be tested and assessed) -
Could you please provide more details on your defense in depth approach.
“Even though we will be encrypting all local storage” This statement means very little. - at what point are you encrypting? general best practice is to do this in containerised ram then write to disk.
There is no costing outlined for test methodology or testplans. What is your plan for testing? You will probably be spending quite a bit of of your resources on testing. This is generally the case when you “do something new”. I see a lot of expense on development and R&D but little on making sure it actually works and is safe.
tagging @alchemdydc because this kind of software has unquie security issues. Alchemy has contributed to the OWASP, which you will need to go over and probably pay someone to test it. idk. like I said I havent fully checked the scope, i know how myetherwallet works tho.
If you would like me to add extensive information about the issues you will face, how to mitigate them, write test plans, organise testing and triage of bugs (a lot of simple bugs turn out to be potential security issues)
They might do. Do you have a rough idea of the start up 12 month costs for server mantience, SLA’s, dedicated boxes, etc? User adoption may not cause massive issues depening on how you design the site.
I will have a brief look at the sites you listed and see the different methods for implementation. its not going to be exhaustive. I might take a look at metamask.
Thats only one layer of security and not particularly good at that. sure it does what it is supposed to under very narrow conditions, but the devices are just not designed for that.
sure, but it is pretty easy to put a custom OS on an iphone or android (even remotely if the device is >2 years old. “checkm8 apple” and various root exploits on android devices.) FDE might help. I have it on my work phones…
The biggest issue is and always will be user education.