Your Safety Number Just Changed. Here's How To Find Out Who To Blame
Every device key Kanvo has ever published is now in an append-only log, anchored publicly, and served at a URL you can read without asking us. Encryption you cannot audit is a promise, not a property.
An append-only log of every device key
Kanvo now records every key every device has ever registered: when it appeared, when it was superseded, when it was revoked. The log is append-only in the database itself, enforced by a trigger rather than a policy document — an update that rewrites history fails with a permission error, including one made by us.
Read it without asking us
Your keys are served through did:web at a well-known URL alongside your tenant's identity document — no chain, no registry, no wallet, no account. Anyone verifying a conversation with you can fetch the history and check that the key they are encrypting to is the key that was published, when it was published.
What changed for you, in practice
Nothing you have to configure — but two things you will now see:
Why we are telling you the awkward parts
Because an encryption launch that only lists wins is marketing. The honest summary is: MLS gives you the cryptography, the transparency log gives you the identity, and comparing a safety number with a human being remains the strongest check available. The log means you can do it late — after the fact, from a public re…
Kanvo Team
Writes here about what Kanvo is building and why — the send path, the evidence it leaves, and the decisions behind both.
Related Articles
Once an AI reads your inbox, every message has a second reader, and a stranger can write text meant for your agent rather than for you. Slack AI, Microsoft Copilot, Gemini and ChatGPT have all been shown to obey such messages; the people who build the models say it will never be fully solved. Here is what has happened…
The Message That Talks to Your Assistant: Prompt Injection Is Now a Messaging Problem
Once an AI reads your inbox, every message has a second reader, and a stranger can write text meant for your agent rather than for you. Slack AI, Microsoft Copilot, Gemini and ChatGPT have all been shown to obey such messages; the people who build the models say it will never be fully solved. Here is what has happened…
We Looked At Our Own Pricing Page And Deleted a Line Item. Proofs Are Now Free
Every native Kanvo message is now attested the moment it is sent, and generating or checking a proof costs zero credits — forever, for everyone. Here's the receipts-first reasoning.
We Just Shipped End-to-End Encryption — And Deliberately Broke Half of Kanvo To Do It
Private conversations are live: MLS between your devices, ciphertext on our servers, and no search, no assistant, no calls inside them. Here is exactly what you lose, and why we shipped it anyway.
Enjoyed this article?
Subscribe to our newsletter for more insights and updates.