Sectigo Advocates for Shorter SSL/TLS Certificate Lifecycles
Sectigo has announced its support for a pivotal ballot submission to the CA/Browser Forum, aiming to significantly decrease public SSL/TLS certificate lifecycles. This initiative, led by Apple, intends to lower the maximum certificate lifespan from the existing 398 days to just 47 days by the year 2028. This potential shift represents a groundbreaking change in how digital certificates are managed.
The Push for Shorter Lifecycles
In recent years, major web browsers, particularly Apple, have been vocal advocates for reducing the lifespan of public certificates. The primary goal behind these efforts is to enhance security practices across the digital landscape. Shortening the period a certificate is valid can lead to several crucial benefits, including improved security measures and a more robust alignment of certificate ownership with domain management.
Key Benefits of Shorter Validity Periods
By decreasing certificate lifespans, organizations can adopt stronger security protocols. The gradual reduction in validity periods reflects a broader trend that has already seen the maximum validity term reduced from several years to a more sustainable and secure duration. This proactive strategy encourages organizations to improve their certificate management practices, fostering quicker implementation of security updates and greater adaptability to evolving industry standards.
Importance of Automated Certificate Management
With the ADOPTION of shorter certificate lifecycles, organizations must embrace automated certificate lifecycle management. As Tim Callan, chief compliance officer at Sectigo, stated, the shift towards shorter lifecycles brings security advantages but also poses operational challenges. Companies will need to implement solutions to ensure timely renewals, thereby preventing service disruptions that can arise from missed deadlines.
Impacts on Business Operations
It's critical for enterprises to understand that this change will affect their operational strategies. Those still using traditional methods of certificate management may face considerable challenges as they adapt to increased renewal frequencies. The move to automated systems that leverage protocols like ACME (Automated Certificate Management Environment) can help mitigate risks associated with manual certificate management.
The Phased Approach by Apple
Apple's proposed strategy to implement these changes gradually allows businesses the necessary time to adjust their infrastructures. The implementation of a phased approach means that rather than an immediate transition to 47-day certificates, organizations will gradually decrease lifetimes over the years, allowing for smooth transitions in their operational procedures.
Preparing for Future Changes
Organizations looking to adapt to these upcoming changes can benefit immensely by developing a solid plan for digital certificate management. A well-thought-out approach will involve not only updating infrastructure but also establishing automated renewal capabilities to ensure compliance and uninterrupted service.
About Sectigo
Sectigo stands out as an industry leader dedicated to providing comprehensive certificate lifecycle management (CLM) solutions. Their cloud-native platform is geared towards issuing and managing digital certificates from all trusted certificate authorities, facilitating improved security across various sectors. With over 700,000 customers and two decades of experience, Sectigo is committed to enhancing digital trust and security for its clients.
Frequently Asked Questions
What is the key proposal by Sectigo and Apple?
The proposal seeks to reduce public SSL/TLS certificate lifecycles from 398 days to 47 days by 2028.
Why are shorter certificate lifecycles important?
Shorter lifecycles enhance security, promote better management practices, and adapt more swiftly to evolving technologies.
What does Sectigo advocate for regarding certificate management?
Sectigo encourages organizations to adopt automated certificate lifecycle management systems for effective handling of renewals.
How will businesses be affected by these changes?
Businesses will need to adjust their operations, particularly in managing increased certificate renewal frequency.
What role does automation play in this transition?
Automation helps ensure timely renewals, reduces operational risks, and supports the management of shorter certificate lifecycles.
