Warrant canary.
A statement signed every month with a dedicated key: no warrants, no national security letters, no gag orders, no seizures. The signal is absence — if this canary expires or its signature breaks, assume the worst. Don't trust this page's verdict; verify it yourself.
Signed 2026-08-08 · valid through 2026-09-17 · 12 days remaining. Signature verifies against the pinned canary key on this server — which you should not take at face value. Verification instructions below.
The current canary.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 PGPony Warrant Canary ===================== As of the signing date below, NorseHorse, the sole operator of pgpony.app and its mirrors and the PGPony family of applications, states that all of the following are true: 1. We have received no warrants, subpoenas, court orders, national security letters, or gag orders of any kind. 2. We have not been compelled to modify our software, our keyserver, or our infrastructure to weaken, backdoor, or surveil anyone. 3. We have not disclosed any private user data to any third party. 4. We remain in full control of our signing keys and our servers. This canary is refreshed every 30 days. If the newest signature you can find is dated more than 40 days ago, treat this canary as broken and assume we may no longer control this infrastructure. Signed: 2026-08-08 Expires: 2026-09-17 Proof of freshness, the latest Bitcoin block hash at signing time: 00000000000000000001574b03f88fbd75b4862846b688ce7c81e945b9f830ef -----BEGIN PGP SIGNATURE----- iKQEARYKAEwWIQTA9JW2+7bTTYAMgTp2FF1ufb0urwUCaneYgxsUgAAAAAAEAA5t YW51MiwyLjUrMS4xMiwwLDMSHGNhbmFyeUBwZ3BvbnkuYXBwAAoJEHYUXW59vS6v isYBALtrmxZ54LdRRCrybwQaf96Vt6Jy8cBPHlcxcF24crWrAQCjFrsTc5AUIT8I fCwfE+58/JHcxPFGaZ2lx/4KkyASCg== =tzmJ -----END PGP SIGNATURE-----
Verify it yourself.
The canary key is dedicated to this purpose and its public half is pinned here. Save a copy the first time you visit; on every later visit, verify against your saved copy, not ours.
In the browser: open the Playground's verify tool, paste the canary public key and the canary text above. Everything runs locally; the page makes no network requests.
With GnuPG:
curl -sO https://pgpony.app/canary/canary-key.asc curl -sO https://pgpony.app/canary/current.txt gpg --import canary-key.asc gpg --verify current.txt
What to check: the signature is good, the fingerprint matches your saved copy, the Signed: date is recent, the Expires: date is in the future, and the Bitcoin block hash in the freshness proof matches the real chain (any block explorer) — proving the statement couldn't have been signed in advance.
Archive.
Every previous canary, kept forever. Gaps or missing months are themselves information.
Canaries are published monthly with a 45-day validity window, leaving ~15 days of grace for life to happen. This page is mirrored on the onion service; a mismatch between clearnet and onion is also information.