Google Calls Out Chinese Internet Authority for Cyberattack

The Google logo is seen at the Google headquarters in Mountain View, Calif., on Sept. 2, 2011. Kimihiro Hoshino/AFP/Getty Images

A Chinese Internet authority responsible for ensuring the security of the World Wide Web compromised that security, according to search giant Google.

Google announced on its security blog on March 23 that three days prior, they “became aware of unauthorized digital certificates for several Google domains.” The certificates were issued by the Egypt-based MCS Holdings.

MCS Holdings is in turn operated by the China Internet Network Information Center (CNNICC). Since 2010, CNNICC has been granted the authority by major Web browsers to issue certificates.

The structure of the Internet is based on the use of certificates. Each website has one, and Internet browsers rely on the certificate to verify that the website the user is looking at is what it says it is.

The importance of an Internet security certificate cannot be understated, according to James Gabberty, professor of information systems at Pace University in New York City.

“It underpins everything,” Gabberty said in a phone interview. “Certificate authorities are key to everything. Otherwise there is no trust on the Internet. A site that looks like a valid site could be spoofed and you would never even know it.”

Certificate authorities are key to everything. Otherwise there is no trust on the Internet.

— James Gabberty