Sync .obsidian configuration #65

New issue

Closed

opened 2026-09-21 18:06:06 +01:00 by cruelacid · 1 comment

cruelacid commented

2026-09-21 18:06:06 +01:00

Owner

Part of #37.

What Relay does

Not shipped. Their issue #37 is open and labelled "tracking" with no ETA.

What we do today

Refused by design. blob-policy.ts:30 ignores any path with a dot-segment, and
the comment says why: listFiles walks the vault index which already excludes
them, and the rule is stated explicitly "so that nobody later reaches for
adapter.list(), which does see them, and starts syncing the plugin's own
configuration".

Why this is riskier for us than for them

Syncing .obsidian means syncing our own data.json, which holds folder
mappings and, where there is no OS credential store, secrets. A loop where the
plugin syncs its own configuration between devices is a footgun with sharp edges,
and docs/security-model.md already notes any plugin can read what we store.

If it is ever built it must be an explicit allowlist of config files — themes,
snippets, hotkeys — never the whole directory, and never our own.

Risk

risk:none mechanically; a real security-model question.

Part of #37. ## What Relay does **Not shipped.** Their issue #37 is open and labelled "tracking" with no ETA. ## What we do today Refused by design. `blob-policy.ts:30` ignores any path with a dot-segment, and the comment says why: `listFiles` walks the vault index which already excludes them, and the rule is stated explicitly *"so that nobody later reaches for `adapter.list()`, which does see them, and starts syncing the plugin's own configuration"*. ## Why this is riskier for us than for them Syncing `.obsidian` means syncing **our own `data.json`**, which holds folder mappings and, where there is no OS credential store, secrets. A loop where the plugin syncs its own configuration between devices is a footgun with sharp edges, and `docs/security-model.md` already notes any plugin can read what we store. If it is ever built it must be an explicit allowlist of config files — themes, snippets, hotkeys — never the whole directory, and never our own. ## Risk `risk:none` mechanically; a real security-model question.

cruelacid added this to the Backlog - unscheduled milestone

2026-09-21 18:06:06 +01:00

cruelacid added the

labels

2026-09-21 18:06:06 +01:00

cruelacid referenced this issue

2026-09-21 18:08:51 +01:00

Relay feature parity, with end-to-end encryption (tracking) #37