TOR EXIT RELAYS IN LIBRARIES: A NEW LFP PROJECT

Greetings! It’s been an exceptionally busy few months over here at the Library Freedom Project. We’ve been conducting privacy trainings at libraries across the United States and some internationally, and in June we held our first Digital Rights in Libraries conference. We’re also starting an HTTPS campaign for libraries with friend o’ the Library Freedom Project Eric Hellman and the good folks working on Let’s Encrypt (more on that to come in about a week or so). LFP: can’t stop, won’t stop.

Today, we’re announcing the start of a new initiative, a collaboration between the Library Freedom Project and our friends at the Tor Project: Tor exit relays in libraries. Nima Fatemi, the Tor Project member who’s already helped Library Freedom Project in a number of ways, is our main partner on this project. This is an idea whose time has come; libraries are our most democratic public spaces, protecting our intellectual freedom, privacy, and unfettered access to information, and Tor Project creates software that allows all people to have these rights on the internet. What’s more, Tor Project is Free and Open Source Software (FOSS), which is the best defense against government and corporate surveillance. We’re excited to combine our efforts to help libraries protect internet freedom, strengthen the Tor network, and educate the public about how Tor can help protect their right to digital free expression.

Libraries have been committed to intellectual freedom and privacy for decades, outlining these commitments in the ALA Core Values of Librarianship, the Freedom to Read Statement, and the ALA Code of Ethics. They’re also centers of education in their local communities, offering free classes on a variety of subjects, including computer instruction. Libraries serve a diverse audience; many of our community members are people who need Tor but don’t know that it exists. Some of these patrons are part of vulnerable groups, like domestic violence survivors, racial and ethnic minorities, and LGBTQ communities. Others belong to local law enforcement or municipal government. All of them could benefit from learning about Tor in a trusted, welcoming environment like the library.

Bringing Tor exit relays into our libraries would not only be a powerful symbolic gesture demonstrating our commitment to a free internet, but also a practical way to help the Tor network, and an excellent opportunity to help educate our patrons, staff, boards of trustees, and other stakeholders about the importance of Tor. Relays make up the backbone of the Tor network, which is what powers the Tor Browser. Tor Browser is the only web browser that gives the user anonymity and prevents tracking and censorship. It’s a powerful tool for free expression, one that libraries should be installing on their public PCs and teaching to patrons. I’ve written about the importance of using and teaching Tor Browser in libraries here.

When a user opens the Tor Browser and navigates to a website, her traffic is bounced over three relays, scrambling her traffic with three layers of encryption, making her original IP address undetectable. The exit relay is the last relay in this circuit, the one that talks to the public internet. Fast, stable exit relays are vital to the strength of the Tor network. Non-exit relays – guards, middle relays, and bridges – are also important to the Tor network, but exit nodes are the most needed, and libraries can afford some of the legal exposure that comes with an exit. It’s not dangerous to run an exit, but because the exit node is the only identifiable one on the circuit, exit operators might face the occasional DMCA notice or law enforcement officer inquiring about traffic on the node. Since libraries already provide public internet services, we are protected by from DMCA takedowns by safe harbor provisions and are shielded from the threats that an individual exit relay operator might face in trying to explain to law enforcement that the traffic leaving her exit is not her own. For more on how the Tor network and Tor Browser work, check out this awesome animation from Tor Project.

To begin this new project, we needed a pilot, and we had just the library in mind – Kilton Library in Lebanon, New Hampshire, one of two Lebanon Libraries. Chuck McAndrew is the IT librarian there, and he’s done amazing things to the computers on his network, like running them all on GNU/Linux distributions. Why is this significant? Most library environments run Microsoft Windows, and we know that Microsoft participated in the NSA’s PRISM surveillance program. By choosing GNU/Linux operating systems and installing some privacy-protecting browser extensions too, Chuck’s helping his staff and patrons opt-out of pervasive government and corporate surveillance. Pretty awesome.