mirror of
https://github.com/anonaddy/anonaddy.git
synced 2026-04-25 22:25:55 +03:00
[GH-ISSUE #692] Transparency Report & Canary Request #1055
Labels
No labels
bug
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/anonaddy#1055
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ghost on GitHub (Oct 24, 2024).
Original GitHub issue: https://github.com/anonaddy/anonaddy/issues/692
Hi,
First and foremost, thank you for providing such an invaluable service. It has been an excellent tool for protecting privacy and managing email aliases securely.
I would like to follow up on a previous discussion regarding the implementation of a warrant canary or transparency report, as mentioned here (https://github.com/anonaddy/anonaddy/issues/23#issuecomment-584072628). Given that approximately four years have passed since that conversation, could you provide an update on whether these features have been implemented or are still planned?
Additionally, I have a few questions regarding law enforcement requests and data security:
How many law enforcement requests have you received since the service began?
How many of these requests have you complied with?
Would you inform the targeted user of a pending investigation on his account?
Were the requests limited to identifying user information (such as email or IP address), or did they include more extensive data, such as:
Logging incoming or outgoing emails
Account-related data (e.g., email forwarding addresses, alias activity)
Other stored or real-time data regarding users
Furthermore, has there been an independent audit conducted on your servers to ensure the security of the system? This would provide additional confidence in the robustness of the platform's privacy features.
Lastly, is there a service or independent third party that could verify or confirm that no information has been handed over to law enforcement without a proper legal basis? This kind of assurance would go a long way in fostering further trust in the platform.
Thank you again for your dedication and hard work. I look forward to your response.
@ccorneli commented on GitHub (Nov 16, 2024):
I like the idea, although it raises many questions like: what jurisdictions would even have authority?
I know from the FAQ that Will is based in UK, but I don't remember seeing where the servers are hosted.
And if the hosting company receives a request directly, would they even be required to inform him?
I know it was popular about 10 years ago, but seemed mostly as an experiment.. but are they still considered useful?
I'm guessing pretty much every company in this space has (or will receive one). Perhaps there has been no response because he already received one, and can't answer those specific questions?
Anyway, here is some additional examples/info to consider...
https://www.nimbox.co.uk/blog/draconian-laws-and-canary/
https://www.okta.com/identity-101/warrant-canary/
@RokeJulianLockhart commented on GitHub (Dec 7, 2025):
@ghost, I'd trust the platform more if I knew that the operators had no qualms with proactively co-operating with law enforcement. I'd hope that none of us are criminals.