Trust Model
What do you need to trust?
Every storage system requires some level of trust. Here's exactly what Rabbithole requires — and what it doesn't.
You do NOT need to trust
- Rabbithole team — we never see your plaintext data
- ICP node operators — they only process encrypted blobs
- Network infrastructure — encryption happens before data touches the network
You DO need to trust
- The encryption code — it's open source, audit it yourself
- Your browser — the encryption runs in your browser's JavaScript engine
- Internet Identity — for authentication (also open source)
- ICP consensus — that the network correctly executes canister code
Threat model
Rabbithole vs Traditional Cloud
Comparison with other solutions
No system is perfect
Rabbithole minimizes trust assumptions, but no system can eliminate them entirely. We believe in transparency: if you find a weakness, report it.