A warrant canary is a method by which a service provider can inform its users that it has not been served with a secret government subpoena. If a canary is not updated or is removed, users are to assume that the service provider has been served with a secret subpoena and is no longer safe to use.
checking signature· signed rsa-4096 · 2026-08-28
If this canary is not updated within 30 days, or if it disappears entirely, assume we have been compromised.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
fink
Date: 2026-08-28T06:48:24.424Z
We, the developers of Fink, confirm that we have not received any secret subpoenas, national security letters, or any other classified demands for user data, encryption keys, or backdoors. Our infrastructure remains uncompromised, and our zero-knowledge architecture remains intact.
-----BEGIN PGP SIGNATURE-----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=E4bb
-----END PGP SIGNATURE-----
Signer: Fink Security <dev@fink.fyi>
Key Type: RSA 4096-bit
How this works
We plan to update this canary regularly. If this page ever disappears, fails to update, or if the PGP signature becomes invalid, you should immediately assume that fink has been compromised by a state-level actor and our zero-knowledge architecture has been legally breached.
Because of the mathematical nature of our application, even if we were compromised, past communications and data remaining on your device remain secure. However, a dead canary means the network or the application distribution channels can no longer be trusted.