> I don't see how the government could be stopped from forcing a company to hand over their encryption keys and just continuing to publish the canary on the company's website themselves though.
The government could force the handover of encryption keys, with the caveat that if a set of keys controlled by the provider can compromise your security, it's a trash system.
Forcing the existing canary to remain would be straightforward as well.
Compelling false speech, i.e., continuing to publish a time-based canary, is a huge leap from either of those things.
The government could force the handover of encryption keys, with the caveat that if a set of keys controlled by the provider can compromise your security, it's a trash system.
Forcing the existing canary to remain would be straightforward as well.
Compelling false speech, i.e., continuing to publish a time-based canary, is a huge leap from either of those things.