US judge orders DreamHost to redact information identifying users of anti-Trump website, ruling DoJ must provide details on why it needs the data
A judge ordered the web hosting company DreamHost to redact identifying information about visitors to a website used to coordinate …
Context & Ripple Effects
This ruling is the latest turn in a months-long standoff over one search warrant. After DreamHost opposed the DoJ request for records on the owners and visitors of the anti-Trump site — including 1.3M IP addresses — the DoJ itself conceded the warrant was too broad and said it had no interest in most visitor records. A judge then allowed a handover with court-side limits in August.
Today's order tightens those limits further: identifying information must be redacted before delivery, and the DoJ now has to spell out why it needs each piece. The case has become the clearest test yet of how far a single warrant can reach into a hosting provider's logs.
First-order effects
- The DoJ cannot simply receive unredacted visitor data from DreamHost — it must first justify to the court why specific identifying information is needed, shifting the burden of proof from the host to the government.
- DreamHost gets judicial cover for its position that bulk disclosure was excessive, after months of contesting the scope rather than refusing outright.
Second-order effects
- Other hosting providers facing similar demands can point to this template — redact first, justify per-item — raising the cost and narrowing the yield of broad warrants against web hosts.
- Prosecutors drafting warrants will likely specify narrower targets up front, since courts here have shown willingness to rewrite scope mid-litigation.
Third-order effects
- If courts keep inserting themselves as gatekeepers between agencies and platform-held user data, the pattern extends beyond hosting: judges have since applied similar logic to social platforms, as in the order barring Meta from complying with DHS subpoenas for Instagram users' information.
- The case feeds a longer line of rulings treating IP addresses and visitor logs as protected material requiring individualized justification — the same instinct behind the FCC being forced to open its comment-server logs to fraud investigators in the net neutrality comment review.
The trend: Judges are increasingly acting as permission boundaries between law enforcement and platform-held user data, forcing agencies to justify scope item-by-item rather than seize server-wide.