ZT Browser’s Plan for 2024
March 18, 2024

Click here to read PDF edition (digital signature and timestamp with global trust and global legal effect, all rights reserved, plagiarism is prohibited!
Please indicate when reprinting: Reprinted from ZoTrus CEO Blog)

Some readers may be curious, it’s been a month since we started work after the Spring Festival of the Year 2024, and we are now writing the plan for 2024, it seems that the pace is a bit slow. Yes, the author has no plan to publicly disclose our R&D plans, but in the past month, many ZT Browser users have asked for this. So, the author decided to write an article to publicly talk about ZT Browser’s plan for 2024. ZT Browser will do four things this year, including two trusted root programs and two products research and development.

1. Launched the Trusted Root Program for Document Certificates for Global CAs

In October 2023, ZT Browser integrated a full-featured PDF document reader. It not only support browsing and viewing PDF documents seamlessly while browsing the page, but also validate in real time whether the document has a trusted digital signature. If so, the signer’s trusted identity will be displayed to help users identify the trusted identity of documents, to protect users from fake identity documents, and further to promote the popularization and application of digital signatures for PDF documents.

ZT Browser will continue to improve this function and will support OFD format file reading and digital signature verification, support validation of SM2 algorithm digital signatures, support dual algorithm dual digital signature validation, and give priority to displaying SM2 signature information if have.

To enable ZT Browser to accurately identify PDF documents signed by document signing certificates issued by more CAs, ZT Browser has released the Document Certificate Trusted Root Program. The Program establishes a baseline requirement for document signing certificates because there is currently no baseline requirement for document signing certificate. ZoTrus Technology not only actively participates in China Cryptography standard for document signing certificates led by Beijing CA, but also actively promotes the establishment of a document signing certificate working group of CA/Browser Forum, which will formulate the document signing certificate baseline requirement standards.

The document certificate trusted root program of ZT Browser has received positive response and support from several leading CAs, and they are actively preparing to join our program. After ZT Browser completes supporting the signature of SM2 document certificate, we will open the trusted root program for SM2 algorithm document certificate and jointly promote the popularization and application of SM2 document certificate.

2. Launched the Trusted Root Program for Intranet SSL Certificates for Global CAs

Intranet traffic security is an forgotten security blind spot, because international standards do not allow CAs to issue SSL certificates for intranet IP addresses and internal names, users have to either endure HTTP plaintext insecure method, or use self-signed SSL certificate but need to endure the insecurity warnings of all browsers, and must also manually trust the self-signed certificate, but this is equivalent to giving fake websites the green light to use the self-signed certificate, which is still very insecure. This is the dilemma encountered by global users, and ZT Browser is the first in the world to launch the Intranet SSL Certificate Trusted Root Program to solve this problem, which supports SSL certificates issued by RSA/ECC/SM2 algorithms.

ZoTrus Intranet SSL Certificate Trusted Root Program solves the following three problems:

  • A CA trusted by the browser issues an intranet SSL certificate, and the user has a place to apply for an intranet SSL certificate instead of using a self-signed certificate.
  • The user does not need to manually trust the self-signed certificate or manually install the intranet root CA certificate, because ZT Browser already trusts the intranet SSL certificate issued by the certified root CA.
  • It provides a baseline requirement for intranet SSL certificates that CAs must comply with when issuing intranet SSL certificates, which no related standard currently in the world. CAs must issue intranet SSL certificates in accordance with this baseline requirement for intranet SSL certificates formulated by ZT Browser, so that ZT Browser can seamlessly implement HTTPS encryption for the intranet web system and display the user's trusted identity in the intranet SSL certificate.

In other words, ZT Browser and global CAs jointly provide intranet SSL certificates for global users, which not only solves the problem of intranet traffic encryption needed by global users, but also brings new profit growth points to global CAs.

3. R&D work one: Integrate email encryption automation service

ZoTrus Technology plans to build ZT Browser into a three-in-one super APP: browser, document reader, and email client, which is the real implementation of ZoTrus Technology's product concept of "One-client multi-purpose, Client-cloud integration". ZT Browser has completed the integration of the document reader in October 2023 and has been able to validate the digital signature of the document in real time and display the trusted identity of the document signer, and it will complete the integration of the email client this year.

In the traditional mode, this work is done by email client software such as Outlook, which requires the user to apply for an email certificate from the CA and configure it for use in Outlook, and the user needs to exchange the public key with the recipient before sending the encrypted email. The email encryption automation service of ZT Browser is a client-cloud integration to complete these tasks, users can send encrypted emails and automatically decrypt and read encrypted emails as they usually use the browser to log in to the web mailbox, users do not need to apply for email certificate from CA, no need to config it in email client, no need to exchange public keys with recipients, everything is automatically completed by ZT Browser.

That's all the information the author can disclose at present, so please look forward to it together. However, what the author can clearly tell ZT Browser users is that this email encryption automation service is completely free, the email certificate is completely free of charge, the email encryption service is completely free to use, and there will be no third-party ads in the service. Maybe you will be curious about our profit model, this can also be disclosed, that is, users can purchase the charged IV/OV/SV email certificates containing user identity information, the free service auto-configures the MV email certificate containing email address only. Welcome to purchase an identity certificate to show the sender's trusted identity and support our email encryption automation service.

4. R&D work two: Integrate document signing automation service

ZT Browser has integrated the PDF document reader function, which can identify the digital signature in the PDF document in real time and display the trusted identity of the digital signer of the document. This is just the first step, and ZoTrus Technology will also integrate the document signing and encrypting automation service to further develop document security applications.

The document signing automation service integrated by ZT Browser is a client-cloud integrated automation service that automatically configures document signing certificates and encryption certificates for users, automatically realizes the digital signature and timestamp signature of documents, and to realize the digital signature and encryption protection of all documents with zero cost. This is a completely free service, not only free configuration of document certificates, but also free of charge to provide document signing services and document encryption services, and there will be no third-party ads in the service. Maybe you will be curious about our profit model, this can also be disclosed, that is, users can purchase IV/OV/SV document certificates containing user identity information, the free service auto-configures the MV certificate that contains an email address only. Welcome to purchase an identity certificate to show the trusted identity of the document signer and support our document signing and encrypting automation service.

In addition to being completely free, there is also one of the biggest differences is that our signing service does not upload the documents to be signed to cloud, ZT Browser is used as a signature tool software to sign the documents on the user's local computer, to effectively ensure the privacy information security and business secret information security of the user's documents. At present, all document signing services on the market, including the popular e-contract signing service, require users to upload documents to be signed to the signing platform, which means that the user's privacy confidential information and business secret information in the document are handed over to the signing platform, and users can only pray in heart that the platform will ensure the security of the user's confidential information.

That's all the information the author can disclosed at present, so please look forward to it together. The document signing automation service integrated by ZT Browser is not only completely free, but also does not upload the user's documents to be signed to cloud, effectively ensuring the security of the user's confidential document information.


Finally, to summarize, ZT Browser will do four things in 2024: two trusted root programs - document certificate and intranet SSL certificate, and two product research and development - email encryption automation service and document signing automation service. If there is still time, ZT Browser will release other operating system editions, for other operating system users to bring a real full support for a variety of digital certificate automation applications tool, a super APP that integrates the browser, document reader and email client, a software that supports HTTPS encryption, document digital signature, email encryption, to always ensure the security of Internet surfing and office work.