TurkTrust: Failure to respond to January 2018 CA Communication survey

This case concerns TurkTrust’s failure to respond to a January 2018 Mozilla CA Communication survey by the February 9 deadline. The survey requested information including why TurkTrust did not respond, confirmation that the CA email alias in CCADB was correct, an explanation of why monitoring of the mozilla.dev.security.policy list did not result in a timely response, and what changes would ensure future actions are handled promptly. TurkTrust later provided answers explaining that a strategic reorganization and suspension of SSL activities contributed to the delayed response, and it confirmed the CCADB email alias. TurkTrust stated it would monitor the mozilla.dev.security.policy list and follow Mozilla policies to ensure future deadlines are met. In the thread, discussion on mozilla.dev.security.policy reached agreement that the TurkTrust root should be removed, and a related bug was filed to remove the TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5 root cert. The bug is marked RESOLVED with resolution FIXED.

1. 2018-02-17 Mozilla opened a CA Program compliance issue after TurkTrust did not respond to the January 2018 CA Communication survey by the February 9 deadline.
2. 2018-03-15 TurkTrust submitted responses to the survey questions and confirmed the CCADB email alias.
3. 2018-03-23 Mozilla community discussion agreed the TurkTrust root should be removed and a separate bug was filed for root removal.

1. 2018-02-17 Fastly representative — Reported that TurkTrust had not responded to the January 2018 CA Communication survey as of February 16 and requested specific information and remediation steps.
2. 2018-03-15 Turktrust representative — Provided answers explaining the delayed response, confirmed the CCADB email alias, and stated TurkTrust would monitor mozilla.dev.security.policy and act promptly on future Mozilla requests.
3. 2018-03-17 Fastly representative — Initiated discussion for removal of the TURKTRUST root on the mozilla.dev.security.policy forum.
4. 2018-03-23 Fastly representative — Noted the discussion reached agreement that the root should be removed and that a bug would be filed, linking to a forum thread URL.
5. 2018-03-23 Mozilla representative — Stated that Bug #1448506 was filed to remove the TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5 root cert.