← Google Trust Services LLC cases
Bugzilla #1708516 Incident

Google Trust Services incident updates were repeatedly late or missing

RESOLVED FIXED Google Trust Services LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

Google Trust Services disclosed that it had repeatedly failed to provide timely responses to incident reports and public communications. The bug was opened after Andrew Ayer cited multiple prior incidents and Mozilla policy requirements for keeping the community informed. GTS then filed an incident report explaining that its response process had been too dependent on a small number of people and manual tracking, which contributed to delayed updates. In follow-up comments, GTS said it would add automation, expand staffing, and improve monitoring of Mozilla bugs and forum posts. The thread later recorded that GTS deployed tooling to mirror Mozilla Bugzilla incidents into its internal tracking system, and Mozilla staff indicated the bug could be closed. The bug is marked RESOLVED/FIXED.

Model: gpt-5.4-mini Generated: 2026-06-13 21:26 UTC Revised: 2026-06-16 18:40 UTC Confidence: 0.94 55 comments
Chronology
  1. Mozilla was notified that Google Trust Services had repeatedly missed timely incident updates and public communications.
  2. Google Trust Services posted an incident report describing the causes of its delayed responses and proposed remediation steps.
  3. Google Trust Services said it had deployed tooling to monitor and mirror GTS-related Mozilla Bugzilla bugs into its internal tracking system.
  4. Mozilla staff said they would look at closing the bug on the following Wednesday.
Thread Activity
  1. Mm representative — Andrew Ayer reported that GTS had repeatedly failed to provide timely responses to incident reports and cited several related bugs and policy requirements.
  2. Google representative — Google Trust Services said an incident report was being prepared with full details.
  3. Community commenter — GTS submitted an incident report saying the problem stemmed from reliance on a small set of people, manual tracking, and insufficient backup coverage.
  4. Google representative — GTS said it would automate incident tracking and monitoring, and that weekly incident responses would be handled by the community on-call rotation.
  5. Google representative — GTS said it was preparing a new report to address concerns raised in the thread.
  6. Google representative — GTS posted an updated incident report with a retrospective on prior related bugs and its remediation plan.
  7. Google representative — GTS said it had implemented and deployed tooling to monitor and mirror Mozilla Bugzilla incidents into its internal bug tracking system.
  8. Google representative — GTS said it was handling the incident as a production outage incident and committed to a response by July 22, 2021.
  9. Google representative — GTS said it recognized it had not always met community expectations and summarized its retrospective and action plan.
  10. Mozilla representative — Mozilla staff said they agreed with the concerns raised and would look at closing the bug on August 25, 2021.
Participants
Mm representative Google representative Community commenter Thisisntrocket representative Mozilla representative
Similar Local Cases
#1758372 RESOLVED Incident Opened 2022-03-07 · Closed 2023-02-22 · 100% similar
Google Trust Services: Incorrect OCSP response for issued certificate
#1731164 RESOLVED Incident Opened 2021-09-16 · Closed 2023-02-22 · 96% similar
Google Trust Services: CRL validity period set to expected value plus one second
#1931413 RESOLVED Incident Opened 2024-11-14 · Closed 2024-12-27 · 87% similar
Google Trust Services: New hire onboarding deviation from written procedure
#1948368 RESOLVED Incident Opened 2025-02-14 · Closed 2025-03-14 · 87% similar
Google Trust Services: Self-audit tooling MPIC perspective verification inconsistency
#1522975 RESOLVED Ca Security Vulnerability Incident Opened 2019-01-25 · Closed 2023-02-22 · 86% similar
Google Trust Services: Improper OCSP response for intermediate certificate
#1763203 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Revocation Issue Opened 2022-04-05 · Closed 2023-02-22 · 83% similar
Sectigo: Incorrect OCSP responses
#1651026 RESOLVED Certificate Misissuance Incident Remediation Tracking Opened 2020-07-07 · Closed 2023-02-22 · 83% similar
Izenpe: certificate issued to internal domain
#1709192 RESOLVED Incident Opened 2021-05-03 · Closed 2023-02-22 · 82% similar
IdenTrust: Unavailable CRL for IdenTrust ‘DST Root CA X3’.

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action