360 Browser Update CAB F2F48 @ Guangzhou

2019.11.06 Halton Huo [email protected] 360Browser – The most popular browser in China

360 Extreme Browser 360 Secure Browser 360 Enterprise Browser

MAU: 400M iResearch：Browser End User penetration rate in China DAU: 80M 2018Q3 2019Q3 90% 85% 81% 80%79% 80%

70%

60%

50%

40%

30% 23% 20% 20% 13%14% 14%13% 12%13% 12%13% 10% 8% 10% 5% 5%

0% 360 IE Chrome 2345 QQ UC Cheetah/Kingsoft PC browser remains internet entrance

Browser user daily active map Internet Traffic (Mobile vs PC)

Source：BroadbandSearch Source：360

• PC still eat 50% internet traffic , and browser is >50% for daily use • PC browser users are mainly on OFFICE work scenarios HTTP->HTTPS Status in China

HTTPS vs HTTP visits by County 120% HTTPS HTTP

100% • HTTPS percentage in China relative low 8% 10% 11% 15% 17% 19% 20% (65%) compared with US/EU and other 33% 80% golden bricks countries. • HTTPS in China gov websites is 47%[1], 60% while US gov websites are 100%[2]

92% 90% 89% 85% 40% 83% 81% 80% 67% [1] Based on 111,529 government websites by 360, July 2019 20% [2] Benefits from white house“HTTPS-Only”directive in June 2015

0% US Germany France Russia Brazil Japan India China

Source: ://transparencyreport.google.com/https/overview (expect China) and 360 (China) 360 Root Store updates

CA Roots Status iTrusChina • vTrus Root CA Added after Sept. 1 • vTrus ECC Root CA releases CFCA • CFCA EV ROOT To be released HARICA • Hellenic Academic and Research Institutions To be released RootCA 2015 • Hellenic Academic and Research Institutions ECC RootCA 2015 • Hellenic Academic and Research Institutions RootCA 2011 360 root store update to all products 2 SSL Errors

Cert Errors by PV (based on July 2019) 1200000 1129605

1000000

800000

600000

400000

218821

200000 72273 40868 34431 32486

0 Untrusted CA root risks

1% visit from Untrusted roots，Finance&Pay are under high risks

Untrused rootPV

Untrused 9000

1% 8000 Trusted Anti-AD normally installed by user 7000 99% 6000

5000 Unknown source，360 secure team 4000 investigating

3000

2000

Category Untrusted root PV Level 1000 Finance Alipay1%，TenPay 2%, CCB1% High 0 Shopping Taobao 1%，JD 2% High ADSafe Certum Trusted NetWork GlobalSignature Sample CA 2 CA 2 Certificates CA 2 Search 4%，Google 1% Medium Engine Social Media Weibo 3% Medium Extreme Browser 12 Preview release

Dual Engine: + 78 4K video support

DoH Enabled Windows XP SP2+ w/ 360 server NPAPI support

360 added New Dark Theme features 360 MiniApp • Extend mini app from mobile to PC, more suitable to big screen • Native user experience w/o browser UI with enhanced API support (170+) • Centralized App publish/update/payment, full life cycle management • Full toolchain support and developer community/activities, and empowered by 360 products ecosystem support • Joint-effort on W3C CG and partners Plan

• Update all products to Chromium 78 based

• 360 CT log server setup

• CRLSets auto crawl support

• Untrusted roots investigation Thanks

Halton Huo [email protected]