{"id":4173,"date":"2017-06-02T10:40:24","date_gmt":"2017-06-02T14:40:24","guid":{"rendered":"https:\/\/www.thesslstore.com\/blog\/?p=4173"},"modified":"2023-04-07T13:49:35","modified_gmt":"2023-04-07T17:49:35","slug":"wikipedia-https-censorship","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/wikipedia-https-censorship\/","title":{"rendered":"HTTPS Helped Wikipedia Reduce Government Censorship"},"content":{"rendered":"<h2>A New Harvard Study Found a Decrease In Censorship Following HTTPS Migration in 2015<\/h2>\n<p>Wikipedia, which is one of the most popular sites in the world and the largest free encyclopedia, has been a frequent target for partial or complete censorship by certain governments.<span id=\"newline\"><\/span><\/p>\n<p>In June 2015, Wikipedia became HTTPS-only, in an effort to make browsing more secure and provide privacy to its users around the world.<\/p>\n<p>While we can all agree that HTTPS is A Great Thing, it&#8217;s privacy benefits can actually pose a problem when a government is committed to censorship. \u201cHTTPS prevents censors from seeing which page a user is viewing, which means censors must choose between blocking the entire site [or] allowing access to all articles.\u201d<\/p>\n<p>A main goal of Wikipedia\u2019s mission is to make information freely accessible to the world. Wikipedia was taking a gamble when they moved to HTTPS-only. Would the change increase accessibility to their millions of pages of free knowledge? Or would it lead to harsh crackdowns, cutting some countries off from the site entirely?<\/p>\n<p>A <a href=\"https:\/\/dash.harvard.edu\/bitstream\/handle\/1\/32741922\/Wikipedia_Censorship_final.pdf?sequence=1\" rel=\"nofollow\">new study from Harvard University\u2019s Internet Monitor<\/a> answers the question.<\/p>\n<p>Measuring internet activity in 15 countries known to have human rights issues, the study looked at all 292 of Wikipedia\u2019s localized language sites and measured traffic from Wikipedia\u2019s server and client computers located in the countries. This gave them visibilities on both sides of the connection and gave them a better understanding of how access to Wikipedia was handled.<\/p>\n<p>The comprehensive study found that Wikipedia\u2019s HTTPS-only transition has not lead to wide-spread censorship. In fact, the use of HTTPS has actually decreased the observed amount of censorship activity.<\/p>\n<h2>HTTPS, Privacy, and Censorship<\/h2>\n<p>HTTPS encrypts the URLs you are accessing. It\u2019s still possible to know the hostname you are connecting to \u2013 such as \u201cWikipedia.org\u201d or \u201cWebMD.com.\u201d But anything after the \u201c\/\u201d is only known between you and the server.<\/p>\n<p>For general purpose sites \u2013 like Wikipedia or Google \u2013 this provides you with a good amount of privacy as internet monitors can\u2019t tell if <a href=\"https:\/\/en.wikipedia.org\/wiki\/Censorship_in_China\" rel=\"nofollow\">you are looking at an article on censorship in China<\/a> or a <a href=\"https:\/\/en.wikipedia.org\/wiki\/Geckolepis_megalepis\" rel=\"nofollow\">new species of gecko<\/a>. When the hostname reveals the site\u2019s purpose \u2013 like \u201cWebMD.com\u201d does \u2013 you have less protection because they know it\u2019s something related to medicine or health.<\/p>\n<p>This is one of the major privacy benefits of HTTPS. It gives internet monitors \u2013 such as governments and ISPs aggregating your search history for advertising \u2013 a lot less information about your specific activity. However, it also raises concerns when it comes to censorship because it could lead to a \u2018blanket ban\u2019 approach.<\/p>\n<p>For example, one of the methods used for internet censorship in Iran involves keyword-filtering URLs. This allows them to block any URL with an undesired word in it without blocking other URLs on the same site. When Wikipedia was available over HTTP, this allowed them to selectively block pages while leaving the rest of the site accessible.<\/p>\n<span style=\"display:none\" class=\"tl-placeholder-f-type-shortcode_12753\"><\/span>\n<p>So when Wikipedia restricted their site to HTTPS only in 2015, there were concerns that this would increase censorship because governments only had two choices: block all of Wikipedia, or block none.<\/p>\n<p>The Internet Monitor\u2019s study has found that for the most part, these fears were unfounded. Overall, \u201cthere was less censorship in June 2016 than before Wikipedia\u2019s transition to HTTPS-only content delivery in June 2015.\u201d<\/p>\n<p>They found that there was no evidence of censorship in 11 of the 15 countries. In Uzbekistan and Thailand there appeared to be intermittent censorship of Wikipedia. A lack of data and access in Syria and Saudi Arabia was not conclusive, but there was suspicion of censorship\/interference.<\/p>\n<p>In many of the studied countries \u2013 including Saudi Arabia, Indonesia, Vietnam, and Iran \u2013 there had been evidence that a handful of pages were being blocked before Wikipedia\u2019s HTTPS transition. Those countries have now opted not to block the entire site over a handful of \u2018offensive\u2019 pages.<\/p>\n<p>Unfortunately, some countries are now taking a more aggressive stance on internet censorship. Since the conclusion of the study, <a href=\"http:\/\/www.bbc.com\/news\/world-europe-39754909\" rel=\"nofollow\">Turkey has blocked Wikipedia in its entirety<\/a>.<\/p>\n<p>China \u2013 who already has The Great Firewall, the most sophisticated internet censorship tool \u2013 <a href=\"https:\/\/news.vice.com\/story\/china-is-recruiting-20000-people-to-write-its-own-wikipedia\" rel=\"nofollow\">is developing their own competitor to Wikipedia<\/a>. Some have speculated this will allow them to put more restrictive blocks on Wikipedia. China has censored \u201czh.wikipedia.org\u201d \u2013 the native Chinese version of Wikipedia \u2013 for years. Since 2015 (slightly before Wikipedia became HTTPS-only) they have blocked that version entirely, but the 291 other language versions are accessible.<\/p>\n<p>Kazakhstan proposed\u00a0<a href=\"http:\/\/www.slate.com\/blogs\/future_tense\/2015\/12\/14\/kazakhstan_wants_citizens_to_download_a_mandatory_national_security_certificate.html\" rel=\"nofollow\">their citizens install a \u201cnational security certificate\u201d<\/a> \u2013 a root certificate owned by the government that would allow them to man-in-the-middle their connections (though its unclear if they ever enforced the law). They later tried, unsuccessfully, <a href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1232689\" rel=\"nofollow\">to have the root certificate trusted by Firefox<\/a>. In this scenario, the privacy protections of HTTPS are defeated because the \u201cmiddle\u201d party can decrypt and read the data \u2013 essentially turning the connection back to HTTP.<\/p>\n<p>Internet censorship has in no way been defeated, but this study gives us concrete evidence that HTTPS can be an effective tool in combating censorship and monitoring.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A New Harvard Study Found a Decrease In Censorship Following HTTPS Migration in 2015 Wikipedia, which is one of the most popular sites in the world and the largest free&#8230;<\/p>\n","protected":false},"author":2,"featured_media":4175,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[130],"tags":[284,170,467,3051],"class_list":["post-4173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-everything-encryption","tag-censorship","tag-https","tag-ssltls","tag-wikipedia","post-with-tags"],"views":12248,"jetpack_featured_media_url":"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2017\/06\/iStock-458651827.jpg","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/4173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=4173"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/4173\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media\/4175"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=4173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=4173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=4173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}