UN Special Rapporteur: Anonymity Is Gateway to Free Expression

We at the Tor Project have long said that Tor is a technology for free expression. Today, that view was endorsed by UN Special Rapporteur David Kaye in a new report on encryption and anonymity. The report, a close look at international law and its relation to technology, concludes that encryption and anonymity technologies are essential to the protection of human rights to privacy and freedom of expression and opinion:

Encryption and anonymity, separately or together, create a zone of privacy to protect opinion and belief. For instance, they enable private communications and can shield an opinion from outside scrutiny, particularly important in hostile political, social, religious and legal environments. Where States impose unlawful censorship through filtering and other technologies, the use of encryption and anonymity may empower individuals to circumvent barriers and access information and ideas without the intrusion of authorities. Journalists, researchers, lawyers and civil society rely on encryption and anonymity to shield themselves (and their sources, clients and partners) from surveillance and harassment. The ability to search the web, develop ideas and communicate securely may be the only way in which many can explore basic aspects of identity, such as one’s gender, religion, ethnicity, national origin or sexuality. Artists rely on encryption and anonymity to safeguard and protect their right to expression, especially in situations where it is not only the State creating limitations but also society that does not tolerate unconventional opinions or expression.

The report points to the Tor network specifically, noting that anonymity is critical to protect privacy against identification through metadata analysis. "A common human desire to protect one’s identity from the crowd, anonymity may liberate a user to explore and impart ideas and opinions more than she would using her actual identity." In the protection of free expression, anonymity technology is thus a necessary counterpart to encryption, giving the individual the ability to choose both what to say and to whom to reveal that she is saying it.

The Kaye Report recognizes that technologies can be used for harm as well as for good, but that does not mean they may be banned. Rather, human rights law offers a strict framework for evaluation of government-imposed limits: "Restrictions on encryption and anonymity, as enablers of the right to freedom of expression... must be provided for by law; may only be imposed for legitimate grounds; and must conform to the strict tests of necessity and proportionality." That means that legal restrictions must be publicly and transparently legislated, with judicial safeguards on their application; they must be applied narrowly; and they must be proportional to the objectives of the law. "Because anonymity facilitates opinion and expression in significant ways online, States should protect it and generally not restrict the technologies that provide it."

The Tor Project is pleased to have contributed to the report, and we heartily endorse its conclusion:

The use of encryption and anonymity tools and better digital literacy should be encouraged. The Special Rapporteur, recognizing that the value of encryption and anonymity tools depends on their widespread adoption, encourages States, civil society organizations and corporations to engage in a campaign to bring encryption by design and default to users around the world and, where necessary, to ensure that users at risk be provided the tools to exercise their right to freedom of opinion and expression securely.


May 28, 2015


No one in the world has 'cracked' strong properly implemented encryption.
40 and 56 bit encryption can be cracked very easily. However, 256 bit AES encryption is still uncrackable and it probably will be for several decades.
I'm glad that that https://www.torproject.org/ uses 256 bit AES encryption and has no weaknesses in it's encryption.
Well done, Tor Project, for keeping Tor and your website secure.
Everyone should use Tor.


May 29, 2015


Yes Yes


May 30, 2015


>A common human desire to protect one’s identity from the crowd, anonymity may liberate a user to explore and impart ideas and opinions more than she would using her actual identity.
I know that feel


June 04, 2015


Consider the security of updating TBB, inside updater, or download full TBB package, import public signing key file then verify the package manually, which is better?


June 08, 2015


Its way past time that an organisation such as the UN endorsed Tor. I see it as one of the best things we have got to protect our freedom of expression and right to information.

Having said that, you have to hand it to the UN for siding with these basic rights. Its noble that they are weighing in on an ongoing debate. The debate about encryption and anonymity.

This ongoing debate has seemed completely the opposite as government after government has surfaced with an anti-privacy and anti-anonymity line of reasoning with plenty of rhetoric to scare us half to death about these things. Users are being made to feel like criminals.

In this climate of fear and jack-booted insistence on thinking one way only, the Tor project and this endorsement by the UN is a small beacon of hope.


June 20, 2015


Until yesterday, I was strongly behind the mindset which sought to secure and anonymize personal communications. Tor seemed like a great idea.
But yesterday, my wife's computer was hit by the CTB-Locker malware which leverages that same anonymity to utterly destroy years of our private lives.
Videos of our children growing up, letters and articles researched and written, music painstakingly collected and organized, photos of loved ones taken over decades...
The security afforded the criminal who has put us in this position is provided by "onion" and Tor functionality, regardless of our ineptitude in failing to protect ourselves from the attack.
I have reversed course on my fondness for the urge to keep Big Brother from learning things about the electronic activities of people.
These Tor and Onion things are the equivalent of guns and knives, allowing those with strength and no ethic to forcefully deprive the common person of their most precious posessions.
I would much rather have had my car stolen, my house windows broken, or my living room vandalized. I could painted the walls or got around on the bus.
Now, because the ransomware has damaged our NAS backups, there's practically no hope.
At least, when it comes to gun control, people can defend themselves or lean on authorities to investigate and find out who did the shooting.
With information anonymity the likes of which you provide to anyone, there's no one who can help.
Thanks for nothing. In my mind, it is perfectly clear that worked very hard to help criminals rob me of a large part of my family's most precious belongings.
I feel utterly violated.
The obligation to protect people from maliciousness should come with the privilege of being able to provide the tools allowing them to perpetrate. Cloaking communications from the community which seeks to extend protection to those not strong enough to protect themselves amounts to either an abdication of this responsibility or else a partnership with those acting so despicably.

Pay to get the decryption key and make offline backups so this doesn't happen to you again. The world should not have to live without political freedom because you blame online privacy for this.

I believe you are barking up the wrong tree. How would you react if your children fell victim in a high school massacre. How would guns have defended them? I believe you'd be just barking up the other tree in that case.

It is not the tools that are a problem, without a knife you cannot slice up the pig you want to eat, but also your children may be killed by a maniac using a knife.

For me there is no legitimate use of guns, still they continue being sold. There is a legitimate use of knifes, outweighing the problems their misuse can cause.

For Tor, it outweighs by far its misuse. Tor saves lives!

In your case, the problem seems to reside with you, not taking appropriate backups. Accept that some things have to be learned the hard way.