cam04

Cambodia: Serious concerns raised over the National Internet Gateway

With the digital experience becoming increasingly monetised by private companies such as Facebook and Google, an executive at a leading internet service provider (ISP) believes that the proposed National Internet Gateway (NIG) will be rendered impotent upon completion and that its full implementation would disrupt financial services in the Kingdom.

Speaking under the condition of anonymity, he said private firms have already encrypted the bulk of web traffic online. He stressed that modern encryption cannot be broken by any network devices that route traffic so the NIG “cannot filter any traffic since it will not be able to understand the data passing through its network”.

“You cannot have it both ways. Secure communication for the government and a backdoor to read content are incompatible. If a backdoor is introduced, then hackers will certainly find it. The damage would be catastrophic for the entire financial system, which is why no government has implemented security protocols with backdoor access to date,” he said.

He added that data is sent in encrypted packages, likening the process to mailing an envelope.

“ISPs, including the NIG, can only read the information outside of the envelope, which contains information on where to send the package and where it comes from. Like a sealed envelope, the content of the envelope is not readable when encrypted. Facebook, Google, Amazon and Microsoft have invested billions of dollars into the ‘HTTPS’ protocol because their business model requires them to be able to communicate data securely over a public network, like the internet,” he said.

The Ministry of Posts and Telecommunications proposed the draft law citing national security and users’ rights to privacy. Calls to the ministry and national spokesperson were not returned.

The source stressed that if systems such as the NIG can read the data, that would mean that other players on the internet could also steal user information so the government should not pursue implementation of a system where data is decodable.To do so would threaten global communications, including those within government via communications including Telegram or WhatsApp.

Amazon Web Service (AWS), for example, powers about 30 percent of the internet, according to some estimates. AWS made up more than 60 percent of Amazon’s operating profits last year. Firms including Netflix, Baidu, Facebook and J-Trust bank all use it to host their respective services. Taking down a single web service provider could cripple the Kingdom’s transition to a cashless society, perhaps even hurting its own Bakong banking app.

“Cambodia has made great strides in digitalisation.Its dedication has resulted in the trust of consumers who have adopted solutions like e-wallets and QR payments. For that trust to continue, people must be confident their communications are secure in order to trust online shopping or banking services.  It is not about having something to hide. It is about trust.”

It remains to be seen how the NIG will work in practice but if it is imposed as proposed, experts believe attempts will be made to circumvent it.

Source: https://www.khmertimeskh.com/50823924/serious-concerns-raised-over-the-national-internet-gateway/