← Google Trust Services LLC cases
Bugzilla #1837519
Delayed Revocation
Google Trust Services: Failure to respond to CPR within 24 hours
RESOLVED
FIXED
Google Trust Services LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves Google Trust Services (GTS) failing to respond to a Certificate Problem Report (CPR) within the required 24-hour timeframe, as mandated by the CA/Browser Forum Baseline Requirements. The issue was identified on June 8, 2023, when an internal investigation revealed that inquiries submitted via their contact form were not being processed correctly. GTS took immediate action to investigate and rectify the issue, ultimately deploying a new CPR management system by October 27, 2023, which integrates better with their task tracking tools and improves response times. The incident has been resolved, and GTS has committed to ongoing enhancements to prevent future occurrences.
Chronology
- GTS identifies failure to respond to a CPR within the required timeframe.
- GTS deploys a new CPR management system to improve response times.
Thread Activity
- Google representative — GTS is investigating a potential issue with the automation used to triage CPRs.
- Google representative — GTS provides a detailed timeline of actions taken in response to the CPR issue.
- Google representative — GTS announces the deployment of a new CPR management solution.
Participants
Google representative
Daknob representative
Mozilla representative
Community commenter
Namepros representative
External References
Similar Local Cases
Google Trust Services: OCSP responses not published in a timely manner
Google Trust Services: Revocation data publication delay for revoked unused subordinate CAs
Google Trust Services: Incorrect revocation data temporarily served for GTS Y3 & Y4
Telekom Security: Revocation delay for TLS certificates with basicConstraints not marked as critical
Buypass: Delayed revocation of TLS certificates
GoDaddy: CPR was not responded to in 24 hours
GlobalSign: Failure to revoke noncompliant ICA within 7 days
D-Trust: Delay beyond 5 days in revoking misissued certificate