Field Notes

concept

Warrant canary

StatusStableUpdatedStands on4 sourcesSupportsnotes

A warrant canary is a regularly published statement that a service provider has not received a secret legal process — a national security letter, a FISA order, or similar gagged demand — arranged so that the statement’s removal or non-renewal signals that such process has arrived. It is an attempt to route around a gag order by making silence speak: the provider says nothing about the demand itself, it simply stops saying the thing that is no longer true. The name borrows the coal miner’s canary, which died of invisible gas before the miners did.1

Origin and early use

The form grew out of resistance to the USA PATRIOT Act’s expanded secret process, which let the FBI demand library and business records under gag. Librarians posted signs reading “The FBI has not been here (watch very closely for the removal of this sign)”, and the security researcher Steven Schear is generally credited with coining the term warrant canary in the early 2000s. The first sustained commercial deployment was the storage provider rsync.net, which from 2006 published a signed declaration — with a current news headline as proof of freshness — that no warrants had ever been served on it.

The canary rests on a distinction in US compelled-speech doctrine: the government can prohibit a provider from speaking (a gag order), but compelling a provider to make a false statement — reissuing a canary that is no longer true — is a further step that the First Amendment arguably forbids. EFF’s canonical formulation is that it knows of no case where a court has upheld compelled false speech.1 That is the strength and the limit of the theory at once: no court has ever tested a warrant canary, so the doctrine is an untested inference, not a holding. A government that called the bluff could argue the canary’s removal itself discloses classified information, and the provider would be litigating from a position of already having dared the state to act.

Notable cases

Apple brought the form to prominence in November 2013, stating in its first transparency report that it had never received an order under Section 215 of the PATRIOT Act.2 By September 2014 the sentence had disappeared from two consecutive reports; what happened behind the disappearance was never confirmed, which is itself the canary’s ambiguity. Reddit’s canary, published in its 2014 transparency report, was absent from the 2015 report released in March 2016; asked directly, the CEO replied that he had “been advised not to say anything one way or the other”.3 In 2015 a coalition around EFF launched Canary Watch to track canaries centrally, then wound the project down in May 2016, concluding that non-standard formats defeated automated monitoring and that canaries frequently died of neglect rather than process.4

Why canaries fail

Failure mode What it looks like
Neglect The canary lapses because nobody renewed it, not because process arrived; a false alarm
Ambiguous scope The statement covers Section 215 orders but not NSLs, or the parent company but not the operating entity
Untested legality A court may treat the removal itself as disclosure, removing the supposed safe harbor
No enforcement Nothing obliges the provider to maintain the canary, update it on schedule, or keep its scope constant
Quiet retirement The provider drops the canary during a redesign or acquisition and explains nothing

In the vault

AzireVPN publishes a monthly warrant canary alongside its transparency reports, one rung below the architectural guarantees of its Blind Operator design. The canary fits the ladder analyzed in Privacy claim assurance: it is a declared control whose strength depends on continued maintenance, not a structural property that is costly to revoke. A monthly cadence mitigates the neglect failure mode, but the untested legal theory and the scope question — a Swedish operating entity under a US parent — bound what the canary can ever establish.

  1. Electronic Frontier Foundation, “Warrant Canary Frequently Asked Questions”, Deeplinks, April 2014. The foundational public statement of the device’s legal theory, written by an advocacy organization and never tested by a court. ↩↩

  2. EFF, Apple issues first transparency report, includes warrant canary, November 2013. ↩

  3. Ars Technica, Reddit removes warrant canary from its latest transparency report, March 2016. ↩

  4. Electronic Frontier Foundation, “Canary Watch — one year later”, Deeplinks, May 2016. The project’s own retrospective on why the tracker was wound down, which makes it evidence about the practice’s difficulties from the people who most wanted it to work. ↩

Built on 4 sources (4 external).

Working out connections…