reply on: Stacker Saloon \ stacker news

0 sats \ 5 replies \ @anon 8 Mar \ parent \ on: Stacker Saloon

and renew it once a month if its an all clear

I've thought about putting a literal canary icon in the footer. Then if we're approached, have an icon of a dead canary.

59 sats \ 3 replies \ @anon 8 Mar

you need to set it up to die on its own unless you renew it (feed it), otherwise it can be anti-gag order action

238 sats \ 0 replies \ @elvismercury 8 Mar

Like a warrant tamagotchi.

77 sats \ 1 reply \ @k00b 8 Mar

Ahhh good tip! I guess they can't punish you for not doing something but they can punish you for doing something.

0 sats \ 0 replies \ @ek 11 Mar freebie

Mhh, maybe we can regularly sign something that expires fast enough (a certificate basically) and link to it in the legal page? And when we're approached, it automatically expires and is not renewed. The additional benefit is that only the holder of the private key can renew it.

But that would mean we rely on users being able to verify signatures. Key rotation is simply the first thing that came into my mind when thinking about warrant canaries. But I would think anyone who cares about warrant canaries can be expected to know how to use gpg --verify?

Turns out the first commercial use of a warrant canary also used a digital signature:

The first commercial use of a warrant canary was by the US cloud storage provider rsync.net, which began publishing its canary in 2006. In addition to a digital signature, it provides a recent news headline as proof that the warrant canary was recently posted as well as mirroring the posting internationally.