Your Safety Number Just Changed. Here's How To Find Out Who To Blame
Every device key Kanvo has ever published is now in an append-only log, anchored publicly, and served at a URL you can read without asking us. Encryption you cannot audit is a promise, not a property.
An append-only log of every device key
Kanvo now records every key every device has ever registered: when it appeared, when it was superseded, when it was revoked. The log is append-only in the database itself, enforced by a trigger rather than a policy document — an update that rewrites history fails with a permission error, including one made by us.
Read it without asking us
Your keys are served through did:web at a well-known URL alongside your tenant's identity document — no chain, no registry, no wallet, no account. Anyone verifying a conversation with you can fetch the history and check that the key they are encrypting to is the key that was published, when it was published.
What changed for you, in practice
Nothing you have to configure — but two things you will now see:
Why we are telling you the awkward parts
Because an encryption launch that only lists wins is marketing. The honest summary is: MLS gives you the cryptography, the transparency log gives you the identity, and comparing a safety number with a human being remains the strongest check available. The log means you can do it late — after the fact, from a public re…
Kanvo Team
Writes here about what Kanvo is building and why — the send path, the evidence it leaves, and the decisions behind both.
Related Articles
Every native Kanvo message is now attested the moment it is sent, and generating or checking a proof costs zero credits — forever, for everyone. Here's the receipts-first reasoning.
We Looked At Our Own Pricing Page And Deleted a Line Item. Proofs Are Now Free
Every native Kanvo message is now attested the moment it is sent, and generating or checking a proof costs zero credits — forever, for everyone. Here's the receipts-first reasoning.
We Just Shipped End-to-End Encryption — And Deliberately Broke Half of Kanvo To Do It
Private conversations are live: MLS between your devices, ciphertext on our servers, and no search, no assistant, no calls inside them. Here is exactly what you lose, and why we shipped it anyway.
Proof of Send: Every Message Kanvo Delivers Is Now Signed
Kanvo now signs every outbound message with a record of who sent it, on whose authority, and whether it disclosed itself as AI — appended to a hash-chained ledger anchored in Sigstore Rekor and Bitcoin.
Enjoyed this article?
Subscribe to our newsletter for more insights and updates.