Maybe spideroak's canary isn't a warrant canary, but a general health /
heartbeat canary. If the three signers don't check in every six months,
you know something's happened to them.
Or, maybe they have something else in mind. Isn't part of the point of
this that you aren't allowed to say exactly what you're trying to
communicate with your canary? If "everyone just knows" what some of the
standard canary types mean, maybe that's fine for a while, but maybe that
becomes problematic if the authorities decide that using the code words
that "everyone just knows" now constitutes explicit communication, and
cracks down on it. In the way that you can't say "we certainly are not
revealing that we got an NSL to release Josh's information, nudge nudge
wink wink", because it's obvious what you're trying to communicate there.
If it's too obvious what you're trying to communicate with a canary, maybe
that breaks the canary technique.
Disclaimer: This is all speculation, I don't know squa about doosh.
-Josh (iril...@infersys.com)
_______________________________________________
Tech mailing list
Tech@lists.lopsa.org
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
http://lopsa.org/
