Skip to main content

Glossary Procedure

Warrant canary

Also: canary statement, transparency canary

Origin: The mechanism dates from a 2002 Cory Doctorow note in Reader's Digest; the first public operator-canary was deployed by Apache Software Foundation and rsync.net around 2004.

A regularly-updated public statement asserting that an operator has not received certain categories of secret legal process — typically national security letters, gag-ordered subpoenas, or undisclosed surveillance directives. The absence of an expected update is the signal, on the premise that an operator can be compelled to lie about receipt but cannot be compelled to make a positive false statement.

A warrant canary is a regularly-updated public statement asserting that the operator publishing it has not received certain categories of secret legal process — most often, undisclosed national security letters, gag-ordered subpoenas, or government directives the operator is barred from acknowledging. The signal is the absence of the next expected update: if the canary stops being affirmed on its expected cadence, the silence is the disclosure.

The theoretical foundation, attributed to Cory Doctorow in a 2002 Reader’s Digest column, is that an operator under a gag order can be compelled to remain silent about a specific event but cannot be compelled to make an affirmatively false public statement. The First Amendment doctrine of compelled speech (in US courts) and Article 10 ECHR analogue (in European ones) is the underlying authority; the doctrine has not been definitively litigated as to canaries in either jurisdiction.

The mechanism has known limitations. A gag order can be specific enough that letting a canary lapse is itself a prohibited disclosure — the case-law surface is thin and unsympathetic operators have been told to keep affirming. A canary tied to a specific category of process is uninformative as to other categories. An operator that simply forgets to update its canary creates a false-positive signal. And the audience for whom the canary is operationally informative is small — the readership that actually checks the canary on cadence is a tiny fraction of the user base.

OffshorePress publishes a canary as an editorial discipline and operational signal rather than as a marketing surface. The publication’s journal article on warrant canaries — operational, legal, theatrical sets out the operator’s reasoning and the specific text the canary uses. The cadence is monthly; the signing key fingerprint is published on the same surface.