mirror of
https://github.com/aaronsb/obsidian-mcp-plugin.git
synced 2026-07-22 06:45:14 +00:00
92bd69013f
Records the decision to keep the per-instance, non-synced, auto-generated self-signed cert/key and NOT move the private key into the synced vault, and to dissolve the recurring "store the key in the vault?" question by documenting the HTTPS scope (opt-in, loopback-only, asserts no identity; zero-config already delivered by the HTTP-on-localhost default). Rationale: localhost self-signed cert is low-sensitivity; the API key (#135) is the real secret and already syncs; vault-shared key is a defense-in-depth regression for shared/team vaults for marginal gain. ADR only — no code change; certificate-manager.ts behaviour unchanged. Independent of the accepted "Direct Filesystem Access" finding. Refs #7 |
||
|---|---|---|
| .. | ||
| adr | ||
| architecture | ||
| scripts | ||
| tools | ||
| bases-implementation-fixes.md | ||
| bases-implementation-status.md | ||
| bases-implementation.md | ||
| bases-mcp-reference.md | ||
| graph-traversal.md | ||
| Plugin_UI_July_2025.png | ||
| PROJECT_STRUCTURE.md | ||
| SECURITY-IMPLEMENTATION.md | ||
| troubleshooting.md | ||
