🔑 ZCerts: Verified Privacy for Apps
Zor introduces ZCerts, a new class of cryptographic certificates that prove authenticity through hardware attestation instead of centralized certificate authorities.
🔐 What is a ZCert?
A ZCert is a public key + attestation proof generated inside a Trusted Execution Environment. It guarantees two things:
The key belongs to a verified enclave.
The enclave is running trusted Zor software.
This means users can connect to a .zor service knowing it’s authentic — without trusting an external CA.
⚙️ How It Works
A service generates a ZCert inside its enclave.
The Vault validates the attestation proof and issues a signature.
The ZCert is added to the network’s
zcert_root.Clients verify the ZCert before initiating encrypted sessions.
All communication between ZCerted endpoints is end-to-end encrypted using ECDH/PGP-style handshakes — invisible even to relays and exits.
🌐 Why It Matters
ZCerts replace TLS certificates and domain authorities with something stronger and fairer: cryptographic truth.
No single company can revoke access.
Every service can prove its integrity.
Privacy and authenticity finally coexist.
Last updated