Top 5 stories of 2024

At DigiCert, we’ve closely followed and contributed to the conversations driving the industry forward—from advances in post-quantum cryptography to the push for certificate automation—and we've compiled the biggest takeaways and top stories of 2024.?

Keep reading to discover what your organization can learn to stay ahead of digital trust threats and achieve crypto-agility as we head into 2025.?

5. Why certificate automation is an absolute must?

It's no surprise this story made our top 5—there's been a lot of buzz in the cybersecurity world about shortening TLS/SSL certificate lifespans. Tech giants like Google and Apple have pushed for this change, with proposals to reduce certificate validity from over a year to as little as 45 days.??

The intention behind this push is clear: Shorter lifespans can reduce vulnerabilities and force organizations to rotate their encryption keys more frequently, which will help mitigate security risks.??

But here’s the thing—debating on specific renewal intervals is the wrong conversation to focus on. The real priority needs to be on streamlining and automating certificate management.?

?

4. Solving the revocation gap with short-lived certificates?

Certificate authorities (CAs) like DigiCert, are tasked with revoking certificates when they can no longer be trusted. But revocation is far from a simple task. The process is complex and time-consuming, meaning that compromised certificates can remain active until the revocation is fully processed—leaving them vulnerable to exploitation by attackers.?

So what's the solution? Short-lived certificates. With their shorter lifespans, these certificates significantly reduce the window of exposure for compromised certificates. But to fully harness their benefits, organizations need to adopt a flexible and efficient approach to certificate management. This is where automation comes into play—ensuring that frequent renewals happen seamlessly, keeping your systems secure without increasing administrative burden.?

As short-lived certificates continue to gain traction, crypto-agility—the ability to quickly adapt to evolving cryptographic standards—will be essential for organizations aiming to stay ahead in the rapidly changing cybersecurity landscape.?

?

3. Why recent Chinese encryption research isn’t a threat—yet?

Earlier this year, research from China in the field of quantum cryptography sparked concern within the cybersecurity community. While the study raised alarms about quantum computing’s potential to challenge current encryption methods, the panic was premature. Here’s the reality: Quantum computing may eventually disrupt encryption standards, but the technology isn't advanced enough yet to break existing protocols—something the study itself acknowledged.??

The so-called "crypto apocalypse," where quantum computers could render today’s encryption methods obsolete, is still far off. While it’s critical for organizations to start preparing for the eventual impact of quantum computing, we’re not at the point where quantum computers can “break” encryption—not yet.??

2. What is a CA’s role in delivering digital trust??

CAs are the backbone of digital trust, ensuring secure and authentic online communications by issuing, managing, and validating digital certificates. Their role is critical—CAs verify the identity of entities and enable encrypted communication between users and organizations.?

But it’s not just about issuing certificates; CAs also have to maintain the integrity of the process. The risk of mis-issuance, where certificates are issued to unverified or malicious parties, can cause significant vulnerabilities and a breakdown in digital trust—something every organization should be aware of. If a certificate is incorrectly issued, it can allow bad actors to impersonate trusted entities, leading to security breaches, data leaks, and loss of customer confidence.??

As the digital world becomes more complex, CAs must be vigilant, providing transparency, accountability, and compliance to ensure trust is never compromised.?

?

1. Why Q-Day is closer than you think?

The top story of 2024 centers on Q-Day, the day quantum computers could potentially break traditional encryption methods. While quantum computing remains in its early stages, the countdown to when it could disrupt today’s security protocols is already underway.??

In 2024, significant strides were made in the development of quantum-resistant encryption, with the industry gearing up for a future where quantum computers may challenge current encryption standards. NIST announced three new long-awaited?encryption standards: FIPS 203, 204, and 205, followed by DigiCert hosting its first annual World Quantum Readiness Day. And just recently, Google unveiled Willow quantum chip, marking a major leap toward practical quantum computing.?

The race to safeguard digital trust in the quantum era is on, and the clock is ticking—organizations must act now to stay ahead of this emerging threat.?

Want to dive deeper into what’s next? Explore our 2025 cybersecurity predictions to see how the industry is preparing for emerging threats and shaping the future of digital trust.