The Washington Post
Googling the words “Dalai Lama” or “Tiananmen Square” from China long has produced the computer equivalent of a blank stare, as that nation’s government has blocked websites that it deemed politically sensitive.
But China’s Great Firewall, as the world’s most sophisticated Internet censorship and surveillance system is known, is facing a new challenge as Google begins to automatically encrypt searches in China as part of its global expansion of privacy technology, company officials say.
Most Google searches soon will appear to Chinese censors as gibberish, blocking the government’s ability to screen searches for particular words.
Chinese officials – and those from other nations, such as Saudi Arabia and Vietnam, that censor the Internet on a national level – will still have the option of blocking Google search services altogether. But routine, granular filtering of content will become more difficult, experts say. It also will become more difficult for authorities to monitor search queries for signs that an individual Internet user may be a government opponent, experts say.
The development is the latest – and perhaps most unexpected – consequence of Edward Snowden’s release last year of National Security Agency documents detailing the extent of government surveillance of the Internet. Google and other technology companies responded with major new investments in encryption worldwide, complicating relations between the companies and governments long accustomed to having the ability to quietly monitor the Web.
Chinese officials did not immediately respond to questions about Google’s decision to automatically encrypt searches there, but the move threatens to ratchet up long-standing tensions between the American tech powerhouse and the world’s most populous nation.
“No matter what the cause is, this will help Chinese netizens to access information they’ve never seen before,” said Percy Alpha, the co-founder of GreatFire.org, an activist group that monitors China’s Great Firewall. “It will be a huge headache for Chinese censorship authorities. We hope other companies will follow Google to make encryption by default.”
Alpha, who like other members of the group uses a pseudonym to evade Chinese authorities, noted that Google began encrypting searches in the country more than two months after GreatFire publicly challenged the company to do so in an opinion piece published in Britain’s Guardian newspaper in November.
Google denied that there was any connection, saying that the global rollout of automatic encryption for search began in February for unrelated reasons. All searches made from most modern browsers will be encrypted in the coming months. The completion date for the worldwide rollout is not yet clear, the company said.
“The revelations of this past summer underscored our need to strengthen our networks. Among the many improvements we’ve made in recent months is to encrypt Google Search by default around the world,” said spokeswoman Niki Christoff in an emailed statement. “This builds on our work over the past few years to increase the number of our services that are encrypted by default and encourage the industry to adopt stronger security standards. “
Google pulled out of mainland China in 2010, moving its operations to the quasi-autonomous base of Hong Kong after refusing to comply with orders to censor searches – something that competitors who remained behind still do.
Google began offering encrypted search as an option for some users that same year and made the protection automatic for many users in the United States in 2012. The company began encrypting traffic between its data centers last year, after The Washington Post and the Guardian, relying on documents provided by Snowden, reported on the massive extent of Internet spying by the National Security Agency and its allies. Microsoft and Yahoo soon followed with similar initiatives.
Encrypted search has come more slowly in other parts of the world, and especially to those using older browsers. Firefox, Safari and Google’s own Chrome browser support automatic encryption, but older generations of Microsoft’s Internet Explorer – still popular in China and much of the world – do not. Internet Explorer 6, which was first released in 2001 and does not support encrypted Google searches, still is used for 16 percent of Chinese Internet traffic, according to NetMarketShare.com, which tracks usage.
The move to automatic encryption could spark backlash from Chinese authorities, who constantly tweak their Great Firewall to block the flow of unwanted content and also to maintain the ability to monitor Internet users in China, Western analysts say.
“The Great Firewall is entirely a moving target,” said Richard Clayton, a computer security researcher for the University of Cambridge, in England, who has studied Chinese Internet filtering. “They are tweaking it all the time.”
The censorship poses an obstacle to Chinese businesses that are trying to go global since they don’t have reliable access to sites like Facebook. And there’s no telling on a given day what the government is choosing to block.
“In China a lot of things are like this,” said Jiang Tao, founder of CSDN, a Chinese software developer community. “You don’t know what you can do, what you can’t do. No one tells you.”
Google’s move toward encryption could prompt China to block Google searches altogether or even all services offered by the company. Google has a much lower market share in China than elsewhere in the world but still is widely used by international firms and some others, meaning there could be economic consequences to an outright block.
Another option would be what experts call a “man-in-the-middle attack” that would allow Chinese censors to intercept encrypted traffic and decode it before it reaches Google servers. For many users, such an attack would be obvious because their browsers would warn that the encrypted communication had not reached its intended recipient. Users would be free to proceed with the query, even in the face of a man-in-the-middle attack, but the protection offered by Google’s encryption would be lost.
Alpha, the co-founder of GreatFire, said that Chinese authorities will be reluctant to block Google entirely for the long-term, though they have on occasion slowed access to the company’s services. The economic costs of a major showdown with Google, he said, could be profound.