UPDATED 13:13 EST / SEPTEMBER 30 2019

POLICY

Congress reportedly looking into Google’s plans for stronger Chrome encryption

The House Judiciary Committee’s antitrust review of Google LLC has reportedly taken a new turn. In addition to the company’s ad business and its dominance of the search market, Congressional investigators are now said to be looking into a less obvious topic of interest: Chrome encryption.

The Wall Street Journal reported Sunday evening that the committee had sent Google a letter requesting information about its planned addition of DNS over TLS support to the browser. DoT, as it’s known for short, is a protocol for encrypting Domain Name System requests. The Domain Name System, in turn, is the automated switchboard that helps browsers match a URL entered by the user to the relevant website. 

Currently, Chrome sends DNS requests in an unencrypted form that can potentially be read by hackers. An attacker with access to a user’s network could see what sites they visit and even redirect the browser to a malicious page. By encrypting these requests, DNS over TLS promises to make them that much harder to compromise.

In the letter to Google, the House Judiciary Committee reportedly asked about its reasons for rolling out the technology. Among other things, investigators inquired if the company plans to make money from any DNS-related data it would collect.

The committee apparently started looking into the matter after receiving concerns from a group of internet providers. The group complained that Google may use DoT to route requests through its own DNS servers, thus gaining more market power while reducing carriers’ ability to see what sites their subscribers visit. Some internet providers currently make money from this data by using it for advertising purposes. 

The search giant has pushed back against the concerns. “Google has no plans to centralize or change people’s DNS providers to Google by default,” a company spokesperson said. “Any claim that we are trying to become the centralized encrypted DNS provider is inaccurate.”

It’s unclear what, if any, action the House Committee might take over the planned DoT rollout. Even in the hypothetical scenario that regulators see fit to block Google from routing Chrome requests through its own DNS servers by default, the encryption protocol would still allow the browser to scramble the queries. In other words, internet providers’ access to data about what sites their users visit would be reduced either way.

Google’s plan to boost traffic encryption in Chrome has drawn regulatory attention overseas, too. After the search giant announced the change earlier this year, British intelligence agencies and internet watchdogs reportedly held a series of “crisis talks.” Authorities are said to be concerned that the technology could hamper their ability to block harmful content. 

Image: Thomas Cloer/Flickr

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

  • 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
  • 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.
About SiliconANGLE Media
SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.