Warrant canaryWhat we cannot be made to say, said in advance.
A provider served with a gagged order cannot tell you. It can, however, stop repeating a statement it made freely last quarter — and that silence is a message no order can compel. This is that statement, signed, with a block hash proving when.
Signed and current
The statement below carries a valid signature from the key published at the foot of this page.
The statement
Each item is written to be individually removable, because removal is the entire mechanism. One of these disappearing from a future signing is the message.
- 01 No National Security Letter, FISA order, or equivalent instrument from any jurisdiction has ever been received by any DediPrivacy entity.
- 02 No warrant, subpoena, order or request has ever arrived accompanied by a prohibition on disclosing it to the customer concerned.
- 03 No government or private party has ever been given the contents of a customer disk, database, memory or traffic.
- 04 We have never been ordered to preserve, monitor or intercept a customer's traffic prospectively, nor to install anything for that purpose.
- 05 No equipment has been seized, imaged or physically accessed by any authority at any facility we occupy.
- 06 We have never been compelled to modify a system, weaken a cryptographic protection or introduce a means of access.
- 07 We retain sole administrative control of our infrastructure. No third party holds credentials, keys or a management path into it.
Proof of date
Signed after Bitcoin block 960,003 was mined. That block did not exist beforehand, so this statement cannot have been signed in advance and released on a timer.
0000000000000000000083e9eb459b89b6070a6d28dd719547602ce594c9d8a5
How to read it
The part most canaries leave out.
A canary only works if the reader knows what its silence means before the silence happens. Deciding afterwards is deciding too late.
- Removal is the signal
- If a statement disappears from a later signing, read it as the corresponding event having occurred. That is what the mechanism is for and it is the only thing it can say.
- Silence is also the signal
- If a signing does not appear within 21 days of a quarter opening, treat this canary as expired and act accordingly. Do not wait to be told; nobody may be able to tell you.
- The block hash is the proof of date
- Each signing quotes a recent Bitcoin block. That block did not exist before it was mined, so the statement demonstrably was not signed in advance and stockpiled.
- Verify it yourself
- The signature is real and the key is published. A canary you have to take on trust is decoration; this one fails loudly in your own terminal if it has been touched.
Verify it yourself
Four commands. If any of them fails, this page is lying to you and you should act on that rather than on the reassuring colour of the band above.
curl -sO https://dediprivacy.com/canary-key.asc
gpg --import canary-key.asc
curl -sO https://dediprivacy.com/canary.txt
gpg --verify canary.txt
- Signing key fingerprint
1E54 D9BE F416 1A5E 0871 6802 3924 3549 015B 7740- Public key
- /canary-key.asc
- Signed statement
- /canary.txt
Compare the fingerprint against a copy you did not get from this website — an archived snapshot, a previous quarter you saved, or a mirror. A key served by the same server as the statement it signs proves that the server is internally consistent and nothing more, and that is the one weakness every canary has.
The signed block, in full
Exactly the bytes at /canary.txt. Everything above is a rendering of this; this is the thing that carries the signature.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
DediPrivacy — warrant canary
==================================
Period: Q3 2026 (1 July 2026 – 30 September 2026)
Signed: 2026-07-28 17:33 UTC
Next due: 1 October 2026
Treat expired: 22 October 2026
Entities: 8, in 8 jurisdictions
Bitcoin block: 960003
Block hash: 0000000000000000000083e9eb459b89b6070a6d28dd719547602ce594c9d8a5
That block did not exist before it was mined, so this statement was
not signed in advance of it.
As of the date above, and to the knowledge of every person able to bind
any DediPrivacy entity:
1. No National Security Letter, FISA order, or equivalent instrument from
any jurisdiction has ever been received by any DediPrivacy entity.
2. No warrant, subpoena, order or request has ever arrived accompanied by
a prohibition on disclosing it to the customer concerned.
3. No government or private party has ever been given the contents of a
customer disk, database, memory or traffic.
4. We have never been ordered to preserve, monitor or intercept a
customer's traffic prospectively, nor to install anything for that
purpose.
5. No equipment has been seized, imaged or physically accessed by any
authority at any facility we occupy.
6. We have never been compelled to modify a system, weaken a
cryptographic protection or introduce a means of access.
7. We retain sole administrative control of our infrastructure. No third
party holds credentials, keys or a management path into it.
A statement removed from a future signing should be read as the
corresponding event having occurred. If no signing appears within
21 days of a quarter opening, treat this canary as expired.
Signing key: 1E54 D9BE F416 1A5E 0871 6802 3924 3549 015B 7740
Published at: https://dediprivacy.com/canary
-----BEGIN PGP SIGNATURE-----
iHQEARYKAB0WIQQeVNm+9BYaXghxaAI5JDVJAVt3QAUCamjn0AAKCRA5JDVJAVt3
QMi0AP0W7vNtYjg6NFdLMjxHsxB8xm/ymiiTuquf0vKnK9OUhQD48RQg+76VSfZh
3JcZUpakl+MnabHbhKzSpipJd58nAg==
=8HSs
-----END PGP SIGNATURE-----
On canaries generally.
Do warrant canaries actually work?
They have never been tested to destruction in court, and anybody claiming certainty either way is overselling. The theory is that compelling a company to keep repeating a false statement is a harder thing for a court to order than compelling silence. What is not in doubt is the alternative: without one, a provider under a gag has no way at all to signal, and you have no way at all to notice.
What do I do if it stops being updated?
Treat it as though the statements it used to make are no longer true, and act on your own timetable rather than waiting for confirmation that may be legally impossible to give. Concretely: move anything sensitive, rotate keys you have exposed to the platform, and do not send a message asking us to explain — that question cannot be answered honestly by anybody who is gagged.
Why a Bitcoin block hash?
It proves the direction of time. A block hash cannot be predicted before the block is mined, so quoting a recent one demonstrates the signature was made after that moment. Without it, a company could sign twelve quarterly statements in advance and have them published automatically, which would make the canary a decoration rather than a signal.
Who signs it, and is it automated?
Signing runs on a quarterly timer, and the key is held outside the container that serves this site, so compromising the website cannot produce a signature. Automation is what keeps the statement current — and it is also the obvious objection, because a signer that signs unconditionally would keep chirping after the event it exists to report. The answer to that is a hold: a single file, which any operator able to bind the entities can create without notifying anyone, permanently stops all future signing. The published statement then ages past its grace period and this page turns red by itself. Pulling that brake takes one action and requires no explanation to anybody, which is the property that matters — the explanation is precisely what an order is able to forbid.
Why quarterly rather than daily?
A daily canary is more precise and much easier to break by accident — a holiday, an outage, a script failure produces a false alarm, and after the third false alarm nobody believes the signal any more. Quarterly with a stated grace period is slower and far harder to misread.
What if only one statement disappears?
Then read exactly that one as having occurred, and nothing more. The statements are deliberately separate so that the signal can be specific — a canary that can only say "something happened" tells you almost nothing you can act on.