2

I've recently noticed that most of my activity with Google and its services goes through a local Google Global Cache server set up by our ISP. Since I don't fully trust the ISP, this has become a big concern for me.

Is it possible for the provider to read the encrypted requests that pass through GGC, thus getting access to my mail, documents, search queries and perhaps even password?

Improve this question
2
  • As a side note, how do you know your traffic is being routed via GGC?
    – Mbrevda
    Sep 20, 2016 at 18:48
  • That was a very old question and I don't remember exactly, but I think when I did a whois on google.com and gmail.com, it gave me an IP that belonged to my ISP. Then I googled around some more and, sure enough, found a confirmation to my suspicion on the provider's tech support forum.
    – undercat
    Jan 2, 2017 at 13:17

2 Answers 2

Reset to default
2

As described here:

Once registered and qualified by Google, we will send you a simple agreement for joining the GGC program. After you have electronically signed this agreement, Google will ship you servers that you install in your facility and attach to your network. Google will work with you to configure the servers and bring them into service.

Emphasis is mine. What this means is that your ISP can potentially inspect all the Google queries that the GGC is supposed to cache -- but this entails "opening" some tangible servers shipped by Google themselves. I suppose this would be a flagrant breach of the contractual agreement between the ISP and Google, so chances are that your ISP won't do that. Unless Google agrees, of course. Even if your local Law enforcement agencies insist on eavesdropping on you, it is probable that Google will be involved.

Improve this answer
1
  • So there is a possibility of a security breach. I guess I'll set up a local DNS server to redirect all my requests directly to Google avoiding GGC. DNSCrypt might also be worth looking at to avoid DNS spoofing. Appreciate the answer!
    – undercat
    Apr 8, 2014 at 20:32
0

Your search queries are definitely very easily accessed as you can see by the recent DNS interception in Turkey.

How much information they are able to get depends on how extensive the interception is. Your search queries are the easiest for them to see. Use DuckDuckGo while signed out of Google in an incognito browser for more secure search queries.

As far as other requests, if "they" really want to see it, I'm sure "they" could get to it other ways, not only through your ISP...

Improve this answer
1
  • 1
    Interesting link, though I can't see how DNS spoofing will let a malicious server that my Google traffic will be redirected to decrypt my encrypted HTTPS packets. As for NSA and American gov-t (I assume you meant "them" in your post) wanting to read my data, I'm more concerned about my local government which doesn't have this many ways to intimidate American businesses.
    – undercat
    Apr 8, 2014 at 20:34

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .