← Google Trust Services LLC cases
Bugzilla #1783272
Certificate Problem Report
Google Trust Services: Failure to send preliminary report to subscriber within 24h
RESOLVED
FIXED
Google Trust Services LLC
AI Summary
Google Trust Services LLC experienced a delay in sending a preliminary report to a subscriber following a Certificate Problem Report (CPR). The issue arose when a response was mistakenly sent to the wrong recipient, which led to a breach of the 24-hour response requirement outlined in the Baseline Requirements. Upon discovery, the correct response was promptly sent to the intended recipient. The incident did not involve any misissued certificates, and Google Trust Services has since implemented a guided tool to improve CPR processing and prevent future errors.
Chronology
- Certificate issued and CPR received.
- Correct recipient was notified after error was discovered.
- Initial version of guided CPR processing tool completed.
Participants
kylepomalley@gmail.com
bwilson@mozilla.com
External References
Similar Local Cases
Google Trust Services: SXG certificates issued without correctly checking CAA restrictions
Google Trust Services: Failure to revoke subscriber certificates within BR timeframe
Google Trust Services: Forbidden Domain Validation Method 3.2.2.4.10
Google Trust Services: Failure to provide preliminary report within 24h
Google Trust Services: OCSP serving issue 2020-04-09
Google Trust Services: Short OCSP outage
Google Trust Services: Failure to respond to CPR within 24 hours
Google Trust Services: incorrect SCT in certificate