Google Trust Services: Delayed publication of CPS removing DNS Operator Exception

This case involves Google Trust Services disclosing a delay in the publication of updates to their Certificate Policy Statement (CPS) related to the removal of the DNS Operator Exception. The issue was identified on August 31, 2021, during discussions in the Mozilla dev-security-policy mailing list. Google Trust Services provided a timeline of actions taken in response, including the removal of the exception and the subsequent updates to their CPS. The CA did not stop certificate issuance during this period, as their practices remained compliant with the existing CPS. The case has been resolved with the publication of the updated CPS on August 11, 2021.

1. 2021-08-31 Delay in CPS publication identified by a community member.
2. 2021-08-11 Updated CPS published.

1. 2021-09-03 Google representative — Reported the delayed publication of CPS updates.
2. 2021-09-10 Google representative — Provided a detailed timeline of actions taken in response to the issue.
3. 2021-09-17 Google representative — Outlined improvements to ensure timely CPS updates.
4. 2021-09-24 Google representative — Confirmed completion of internal review and publication of CPS version 4.4.
5. 2021-10-14 Google representative — Requested to mark the bug as Fixed after completing remediation steps.
6. 2021-10-14 Mozilla representative — Scheduled to close the bug.