Twitter lets the certificate for its Tor onion site expire, effectively killing off the privacy-preserving and speech-protecting service after one year
Twitter has allowed the certificate for its Tor onion site to expire, effectively killing off a privacy- and speech-protecting service that it introduced last year.
The VergeAdi Robertson
Context & Ripple Effects
Twitter switched on its onion service in March 2022, built on a modified Enterprise Onion Toolkit so anyone with a Tor-compatible browser could reach the platform even where it is blocked. One year later, the certificate simply expired — no migration, no replacement, just an unreachable v3 onion address.
The quiet end fits a long pattern in this coverage: Tor-dependent projects tend to die with their sponsor's attention, from the EC2 bandwidth-sharing Tor Cloud shut down in 2015 to the sunset of Tor Messenger in 2018. What distinguishes this case is that the operator is a mass-market platform that has publicly staked its identity on broad free expression while letting its most censor-resistant access route rot.
First-order effects
Users in censored networks lose their only sanctioned anonymous route to Twitter overnight, since an expired certificate breaks the connection without any graceful shutdown path.
Twitter forfeits the goodwill asset it announced alongside its free-speech repositioning, and does so without spending political capital — the expiry itself did the decommissioning.
Second-order effects
Rivals actively courting departing Twitter users get a new wedge: T2's plan to absorb users losing their checkmarks shows alternatives already harvesting dissatisfaction, and privacy-conscious users pushed off the onion endpoint are a natural extension of that funnel.
Every remaining corporate .onion site now sits under sharper scrutiny — the Facebook-era precedent that won .onion domains formal IETF special-use status in 2015 assumed big platforms would maintain these endpoints indefinitely, and Twitter's lapse undermines that assumption.
Third-order effects
If the pattern holds — launch for goodwill, lapse when priorities shift — corporate onion services will be read as PR gestures rather than infrastructure, strengthening the case for independent, purpose-built circumvention tools over platform-provided ones.
For the Tor Project, each high-profile corporate abandonment makes volunteer-maintained exit capacity and next-generation onion services like the next-gen crypto overhaul released in 2017 more central, since they cannot be revoked by a single company's certificate policy.
The trend: Platform-operated Tor access keeps proving episodic — announced at moments of reputational need, abandoned when operational priorities move on — which steadily shifts censorship-resistant access away from mainstream social platforms and back toward dedicated tooling.
Tech Guy at Twitter “ Uh You're gonna wanna See this ” * Turns Screen to Elon* Tech Guy “ Theyre Overriding the API ” Elon “ Uh in English Four Eyes ” Tech Guy “ They Fuckin our Pussys.!! ” Elon “Now you're Speakin my Language ” *Deletes Server*
Twitter has let the certificate for its onion service expire, meaning the darknet version of its website can no longer be accessed. Are there plans to fix this @elonmusk ? https://twitter.com/...
@elonmusk The Tor Project has attempted to reach Twitter but has not heard back. Also, it appears those who built the onion service are no longer employed with Twitter. https://www.theverge.com/...
Not just the cert; it appears Twitter has stopped accepting coms from Tor entirely. Huge deal for oppressed folks in countries like Turkey, Iran and China who require Tor to bypass government firewalls and privately provide information on the reality inside their countries https:…
Elon Musk claims (falsely) to be against censorship. Meanwhile, Twitter shut down its Tor service that allows people to access the site anonymously to evade government censorship. There's no word yet as to why, but almost certainly it was to save money https://www.vice.com/...
Twitter has allowed the certificate for its Tor onion site to expire, killing off privacy- and speech-protecting services. This service allowed users get around government censorship efforts like those of #Russia and #Iran @Elonmusk who do you work for? https://www.theverge.com/.…
The Verge: Twitter just let its privacy- and security-protecting Tor service expire “The Tor Project says it's contacted Twitter about renewing the site's certificate.” https://www.theverge.com/...
Twitter's Most Important Anti-Censorship Tool Is Currently Dead Twitter launched its Tor onion service at the onset of Russia's invasion of Ukraine to help people connect to the social network. That site is now... 🔗️ https://www.vice.com/... https://twitter.com/...
New: Twitter's most important anti-censorship tool is currently dead. It's Tor onion service, which it launched so Russians could still access the site, is offline. At the time, Twitter said this was a priority. Those priorities appear to have shifted https://www.vice.com/...
Hey @elonmusk, remediating this is a reasonably straightforward, cheap, and politically popular aspect of the extant Twitter service, running on a small docker tier. I'm happy to advise any Twitter engineers who would like to fix it. https://www.engadget.com/...
Elon Musk said one reason he took over Twitter is his beliefs in free speech. He just killed one of the few real, anti-censorship tools it had. https://www.vice.com/...