Re:Cloudflare expands its government warrant canaries
by jaredwiener on Tuesday February 26, 2019 @11:09AM
(#19255414)
Ideally, sure. But even CloudFlare's doesnt indicate any sort of update date that I can see: https://www.cloudflare.com/transparency/
[ Parent
| on HN ]
Re:Cloudflare expands its government warrant canaries
by rsync on Tuesday February 26, 2019 @11:27AM
(#19255644)
Maybe it's buried in footnotes to that page or in their ToS or something.
In my mind, the "correct" way to do this is to:
1) pgp sign the entire warrant canary statement with a published key.
2) add unfakeable news headlines to the canary itself (such as recent stock prices or sports scores)
3) date the warrant canary and include a well defined schedule of updates
I believe this is the authoritative example:
Re:Cloudflare expands its government warrant canaries
by penagwin on Tuesday February 26, 2019 @11:47AM
(#19255904)
Other then the scheduling piece, this seems like the kind of problem a block chain would _actually solve_. I know we're all tired of "The banks/shipping industry/insurance need to use webscale blockchain!!!!"
But a signed message that's publicly audited as authentic and stored non-centrally seems perfect for canaries....