Canary Statement
A signed message from a service operator stating no secret compulsion (warrant, gag order) has been received. Absence of an expected update may signal compromise.
A canary statement is a dated, usually PGP-signed message in which a service operator asserts that, up to the signature date, no secret legal compulsion has been received. Because a gag order can forbid saying “we were served”, the idea is to speak by going silent: removing the regular statement is itself the message.
Why it matters on the darknet
Markets, forums, and privacy services publish canaries precisely because their users cannot audit anything else. A fresh signature shows the listed key is still under someone’s control and provides a rough heartbeat for the operation.
Limits and common mistakes
A canary proves far less than readers assume. An operator can be compelled to keep signing, the key can be captured together with the server, and a missed update is just as often laziness or a lost key as a raid. Treat a dead canary as a prompt to re-verify through a second source — not as proof of a takedown — and a live one as no guarantee of honesty. The legal mechanism behind the idea is covered under Warrant Canary.
Category: Verification