ZT Browser released the official version, the world's first to supports SM2 certificate transparency

Shenzhen, China – September 30, 2022. Today, ZoTrus Technology released the official version of ZT Browser. The added features based on the public beta version are the world's first innovative support for the SM2 certificate transparency, which can verify the SM2 certificate transparency log data (SCT) using SM2 algorithm signature embedded in the SM2 SSL certificate in real time. And the three SM2 CT log service URLs are included and trust, the SM2 CT support will greatly improve the security of the SM2 SSL certificate, thus effectively protect the security of SM2 https encryption to ensures the security of China Internet.

Certificate Transparency is an international standard initiated by Google, which has effectively protected the security and trustworthiness of more than 7.2 billion globally trusted international algorithm SSL certificates and ensures that all stakeholders can timely detect maliciously issued or mistakenly issued SSL certificates. However, this certificate transparency log system does not support SM2 algorithm and SM2 SSL certificate and cannot be used to ensure the security and trustworthiness of SM2 SSL certificate. Therefore, ZoTrus Technology invested in research and development to successfully transform Google's open-source project - Certificate Transparency Log System to support SM2 algorithm and SM2 SSL certificate, and use SM2 algorithm to digitally sign SCT data, giving birth to the world's first SM2 Certificate Transparency Log System, this system is trusted by ZT Browser, and ZT Browser can verify the SM2 SCT data in real time.

ZT Browser has included and trusted the CerSign SM2 roots and ZoTrus SM2 roots and can verify the SCT data embedded in the SM2 SSL certificate issued by these SM2 roots, and it displays "SM2 Certificate Transparency" in the details in the SM2 encryption icon in the address bar and display the SM2 CT log server URL used to sign the SCT data, as shown in the left figure below. If the SM2 SSL certificate trusted by ZT Browser does not support the SM2 certificate transparency, it displays "SM2 Certificate NOT Transparency", as shown in the right figure below.

SM2 certificate transparency SM2 certificate transparency

ZT Browser is planned to adopt the same CT policy as Google Chrome from July 1, 2023. If the SM2 SSL certificate that does not embed ZT Browser trusted SCT data, then ZT Browser will display “Not secure” in the address bar. That is the same warning page for certificate transparency in the open source Chromium code, clearly reminds the user that the SM2 SSL certificate has not been publicly disclosed using the certificate transparency policy it is for ensuring that this SM2 SSL certificate is trustworthy and protects against attackers. All ZT Browser trusted SM2 root CA operators are requested to upgrade their CA system as soon as possible to support the SM2 certificate transparency. ZT Browser has arranged a transition period of 9 months.

SM2 certificate transparency

The International Certificate Transparency System has successfully ensured the security and trustworthiness of 7.4 billion RSA/ECC SSL certificates. We firmly believe that the SM2 Certificate Transparency System will also successfully ensure the security and trustworthiness of SM2 SSL certificates, thus effectively protecting China Internet security. As an important part of the SM2 certificate transparency system, ZT Browser is the world’s first to support the SM2 certificate transparency, which is not only a technological innovation, but it also a zero trust security practice that zero trust to SM2 SSL certificate that don’t support SM2 certificate transparency.

ZT Browser is not only a completely free SM2 browser, but also the only SM2 browser in the world that supports SM2 certificate transparency. To ensure the security of the SM2 SSL certificate and the security of the SM2 https encryption, welcome to download and use ZT Browser for free.