NAVER Cloud Trust Services: Failure to Respond to May 2022 Survey
Mozilla cited the Root Store Policy requirement that CA operators must respond to Mozilla surveys with accurate information within the defined timescale. The May 31, 2022 deadline for NAVER Cloud Trust Services’ May 2022 Communication and Survey response was missed. Mozilla stated that no certificates were involved in the incident. NAVER Cloud reported that it received an email on May 17, 2022 indicating the response due date, received reminders on June 1 and June 3, and then submitted responses to the June 3 survey. NAVER Cloud attributed the missed deadline to negligence and said it would comply with the response deadline in the future. NAVER Cloud also described remediation steps, including sharing the survey content internally immediately, registering a task in its scheduling tool, and monitoring via daily alarms before deadlines. The bug was resolved as FIXED, and Mozilla indicated it would close the case on or about June 10, 2022.
- NAVER Cloud Trust Services missed the May 31, 2022 deadline to respond to the May 2022 Communication and Survey.
- NAVER Cloud Trust Services submitted survey responses after receiving reminders and a Bugzilla notification.
- Mozilla planned to close the case on or about June 10, 2022.
- Community commenter — Mozilla opened the case, stating NAVER Cloud failed to respond by May 31, 2022 as required by Root Store Policy section 4.2.
- Navercorp representative — NAVER Cloud stated it submitted responses to the June 3 survey.
- Community commenter — Mozilla requested an incident report and pointed to related incident-report guidance and other bugs.
- Navercorp representative — NAVER Cloud described how it became aware of the problem, provided a timeline of emails and notifications, stated no certificates were involved, explained the cause as negligence, and listed remediation steps with monitoring via daily alarms.
- Community commenter — Mozilla said it would close the bug on or about Friday, 10-June-2022.