Warrant canaries: what they are and why they are fragile
A warrant canary is a regularly updated notice stating that a provider has not received a secret legal order. If the notice stops being updated, users are meant to infer one arrived. It relies on a legal distinction between compelled silence and compelled lying that no court has settled.
4 min read
Some legal orders come with a gag: the recipient may not tell anyone they received it. A warrant canary is an attempt to route around that. The provider publishes a signed statement saying no such order has been received, and updates it regularly. If an order arrives, the provider stops updating.
The theory is that a government can compel silence but cannot compel an affirmative lie. Removing a true statement is not the same as making a false one.
What one looks like
A dated, signed statement, published somewhere stable, saying that as of that date the provider has received no secret orders, no national security letters, and no demands to modify its systems. Signed with a key readers can verify, and often including a recent news headline to prove it was written after that date rather than pre-signed in bulk.
The last detail matters. Without a proof of recency, a provider could sign a year of statements in advance and publish them automatically, which would defeat the point entirely.
The problems
Nobody knows whether it works. The legal theory has not been tested to conclusion. A government could argue that removing the canary is itself a disclosure and that the gag prohibits it. There is no settled answer, and a provider facing that argument is choosing between contempt and compliance.
It is ambiguous when it fails. A canary that stops updating might mean an order arrived. It might also mean the person responsible left, the automation broke, or the company forgot. Every real-world case has involved days of speculation about which.
It is coarse. A canary that disappears tells you something happened. It does not tell you what, how broad it was, or whether it affected you.
It only covers what it enumerates. A canary about national security letters says nothing about an ordinary court order, which is what most requests actually are.
Ordinary requests are the common case
The focus on secret orders can obscure that most legal demands are not secret at all. A police force investigating a crime sends a normal request under a normal process, and the provider either has the records or does not.
For that far more common situation, what matters is not a canary but the transparency report — how many requests were received, from where, and how many produced data — and, more fundamentally, whether the data exists.
The thing that actually protects you
A provider that does not hold browsing history cannot produce it, secret order or not. That is a structural property rather than a promise, and it does not depend on an untested legal theory.
This is why the specifics of a logging policy matter more than the presence of a canary. A canary tells you about the provider's legal environment; the retention policy tells you what could be handed over in the first place.
VPNmine does not publish a warrant canary. It publishes a privacy policy stating what is recorded — which server a session used and when — and what is not: browsing history, DNS queries, traffic content. The terms name the operator and the governing law, which is the other half of understanding what could be compelled.
That is a deliberate choice rather than an oversight. A canary whose legal effect is unknown, and whose disappearance would be ambiguous, is a weaker commitment than a specific and checkable statement about retention.
How to evaluate a provider that has one
If a canary matters to you, check three things:
- Is it signed, and can you verify the signature?
- Does it include a proof of recency, such as a headline or a blockchain reference, so it cannot have been pre-signed?
- Is it updated on a stated schedule? Without one, a gap means nothing, because there was never an expectation to violate.
A canary meeting all three is a real, if untested, commitment. One meeting none is decoration.
The honest summary
Warrant canaries are a clever response to a genuine problem and they have never been shown to work. They are worth having and they are not worth choosing a provider over. What is worth choosing a provider over is whether the data being sought would exist at all.
