[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Transparency Report & Canary Request #692

Open
ghost opened this issue Oct 24, 2024 · 1 comment
Open

Transparency Report & Canary Request #692

ghost opened this issue Oct 24, 2024 · 1 comment

Comments

@ghost
Copy link
ghost commented Oct 24, 2024

Hi,

First and foremost, thank you for providing such an invaluable service. It has been an excellent tool for protecting privacy and managing email aliases securely.

I would like to follow up on a previous discussion regarding the implementation of a warrant canary or transparency report, as mentioned here (#23 (comment)). Given that approximately four years have passed since that conversation, could you provide an update on whether these features have been implemented or are still planned?

Additionally, I have a few questions regarding law enforcement requests and data security:

How many law enforcement requests have you received since the service began?
How many of these requests have you complied with?
Would you inform the targeted user of a pending investigation on his account?
Were the requests limited to identifying user information (such as email or IP address), or did they include more extensive data, such as:
Logging incoming or outgoing emails
Account-related data (e.g., email forwarding addresses, alias activity)
Other stored or real-time data regarding users
Furthermore, has there been an independent audit conducted on your servers to ensure the security of the system? This would provide additional confidence in the robustness of the platform's privacy features.

Lastly, is there a service or independent third party that could verify or confirm that no information has been handed over to law enforcement without a proper legal basis? This kind of assurance would go a long way in fostering further trust in the platform.

Thank you again for your dedication and hard work. I look forward to your response.

@ccorneli
Copy link

I like the idea, although it raises many questions like: what jurisdictions would even have authority?
I know from the FAQ that Will is based in UK, but I don't remember seeing where the servers are hosted.
And if the hosting company receives a request directly, would they even be required to inform him?
I know it was popular about 10 years ago, but seemed mostly as an experiment.. but are they still considered useful?
I'm guessing pretty much every company in this space has (or will receive one). Perhaps there has been no response because he already received one, and can't answer those specific questions?

Anyway, here is some additional examples/info to consider...
https://www.nimbox.co.uk/blog/draconian-laws-and-canary/
https://www.okta.com/identity-101/warrant-canary/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant