"I don't understand the value of a warrant canary: if it goes away or is not updated, what is the suggested action of users of the service?" It really depends

"I don't understand the value of a warrant canary: if it goes away or is not updated, what is the suggested action of users of the service?" It really depends on how you use rsync.net. The stated purpose of our product is: An empty UNIX filesystem to do anything you'd like with. So ... if you are using a sophisticated tool like 'borg'[1] or 'restic' or 'duplicity' then no action would be necessary. Your data at rsync.net is garbage ciphertext that we do not hold a key to. On the other hand, you may, as many thousands of people do, use rsync.net as a dead simple SFTP/SCP endpoint[2] and just copy files there. In this case your threat model and exposure is very different - but presumably you realize that. Yes, you are thinking correctly when you describe your bottom line as: "... encrypt your data before it leaves your control ..." ... and we encourage all of our customers to approach it this way. [1] https://www.stavros.io/posts/holy-grail-backups/ https://www.stavros.io/posts/holy-grail-backups/ [2] https://rsync.net/products/sftp.html https://rsync.net/products/sftp.html