China, GitHub and the man-in-the-middle (Greatfire)

Of course the Chinese government _could_ require you (as a citizen, or if they were really wanting to make life difficult, a visitor) to use their software, with their version of the DNS root keys. That would be completely transparent, you'd know that you had the Chinese roots and therefore were seeing only the restricted Chinese Internet, but you wouldn't have any way of reliably escaping from this situation. To bootstrap you need DNSSEC keys for the legitimate root, and there's no reason the Chinese government would let you see those, or indeed even allow a search query looking for them.