ObsidianFrom the builder
Obsidian Sync audits by Cure53 and Trail of Bits
Obsidian has published two independent audits of the Obsidian Sync API, server and cryptography, by Cure53 and Trail of Bits, and says every finding was remediated or disclosed with the auditors' validation. Cure53 flagged four low-priority issues and one medium-priority issue, which led to managed encryption being renamed standard encryption, while Trail of Bits reported eleven issues, three left unresolved, such as deterministic file-hash encryption and no cryptographic link between file paths and content, which Obsidian now documents as trade-offs on its security page.
We’re pleased to report that all findings from these reports have been addressed via remediations and disclosures validated by the respective auditors.
Saved . A shortened excerpt from the official blog; the original publisher retains authorship.