ZT Browser is developed based on the open-source Chromium, the default UI to the HTTP website displays "Not secure", which is also the default display of all browsers, because the HTTP protocol is not encrypted, all information from browser to servers is transmitted in cleartext, which is very easy to be illegally stolen and illegally tampered and cannot ensure the security of confidential information. Please refer to the innovation UI Icon Summary of ZT Browser for details.
The only solution is to deploy SSL certificate on the website to implement HTTPS encryption, so that the browser will not display "Not secure", but a secure padlock. This requires users to apply for SSL certificate from CA, with free or charged. After applying for the SSL certificate, users need to install the SSL certificate on the server, configure and enable the SSL certificate to implement HTTPS encryption.
But if the website fails to correctly deploy the SSL certificate, ZT Bowser will display the red "Not secure" warning, such as: the certificate is revoked, the certificate is expired, the domain name is not matched, the SHA1 certificate, the SCT data without or invalid, the root certificate is not trusted, etc., the specific meanings are as follows. There is also a special case that needs to be noted. If the webpage contains unsecure elements or has an unsecure HTTP hyperlink, the browser still shows the security padlock, but clicking on the padlock will display "Your connection to this site is not fully secure". Therefore, it is recommended to delete the unsecure elements in the webpage and modify the unsecure HTTP hyperlink to HTTPS hyperlink.
It can be seen that in order to not prompt "Not secure" for the browser, user must apply for the SSL certificate and install the SSL certificate. However, this is a relatively painful process, especially the virtual hosting website cannot install the SSL certificate at all. In order to reduce the pain of users and allow the virtual hosting website to eliminate the "Not secure" warning, it is recommended to choose the ZoTrus SM2 HTTPS Automation Management Solution, customers can choose a suitable solution according to their own business system management needs, it has two main application scenarios: HTTPS encryption automation and SM2 HTTPS encryption transformation. The former mainly solves the problem of automatic deployment of RSA/ECC algorithm SSL certificates, because many websites and various business management systems are still not deployed SSL certificates, these systems only need to deploy RSA/ECC algorithm SSL certificates, and do not need to be transformed to support SM2 SSL certificate, but they need to realize automated certificate management. The latter requires not only the deployment of RSA/ECC SSL certificates, but also the deployment of SM2 SSL certificates, and the automatic management of dual-algorithm certificates.
