Add consent mechanism to plugins that send your notes to the cloud

[WhiteNoise]

@PR-C

There needs to be a more proper mechanism to ask for users’ consent on sending data out of Obsidian, particularly given that privacy and local first are two of Obsidian design principles.

We can’t add a “consent mechanism” because we can’t enforce what the user choses to do.

Security of the plugins

[Security] I don’t know if Obsidan dev have think about that, but when the Obsidian plugins will open to public there will be: many noble developers as well as many who want to take advantage of the user data. As the core philosophy of Obsidian hovering around: The user is in charge of his data Data that are locally stored User data are not stored on server or cloud User data are processed locally Obsidian works offline and locally I can guarantee that there will be a huge amount of …

We could create a “standardized pledge” that third party developers take. But understand that this means that the third-party developer promise not to do XYZ, not that we can proactively restrict them not to do XYZ. (you can open a FR for this).

Please continue the discussion here https://forum.obsidian.md/t/security-of-the-plugins/7544