Tor's RAM servers: No data left for cops

Law enforcement raids targeting volunteer-run Tor relays pose a significant risk. In response, the Tor Project is developing stateless, RAM-only servers to render hardware seizures ineffective. These diskless nodes operate entirely in random-access memory, erasing all logs and data upon reboot.

This technological shift aims to protect relay operators from data confiscation. Traditional servers, if seized, can compromise the entire network's integrity. The Tor network's decentralized nature makes implementing these diskless servers technically challenging, yet increasingly necessary.

The initiative, spearheaded by Osservatorio Nessuno, addresses escalating physical threats against operators. While running systems in RAM is not new, Tor's reputation system, tied to long-term identity keys, presents hurdles. Researchers are exploring solutions like Trusted Platform Modules (TPMs) to safeguard these keys and preserve relay reputation across reboots.

Currently in an experimental phase, this move could fundamentally alter online anonymity, ensuring that critical data remains unrecoverable. Discussions began at the Tor Community Gathering in 2025, highlighting the ongoing effort to enhance network security and privacy.