Disagree, their reputation is tied to their audit quality. But I'm pretty sure in this case the scope was bad. Like they coukd have had audits on "Do I use Ope

Disagree, their reputation is tied to their audit quality. But I'm pretty sure in this case the scope was bad. Like they coukd have had audits on "Do I use OpenSSL well?" and then misrepresent that all their privacy claims were audited. Now it seems like Skiff conveniently didn't allow Trail of Bits to publish their reports, they are usually here: https://github.com/trailofbits/publications/tree/master/reviews https://github.com/trailofbits/publications/tree/master/revi... Disclaimer, I have used Trail of Bits service in the past (and 2 other auditors for an security campaign on a blockchain, cryptography + networking product).