Disig: Failure to Respond to Jun 2023 Apple Root Program Survey
Disig reported that it failed to respond to an Apple Root Program communication titled “Apple CA Communication | 2023 Root Policy Update and Survey.” Disig stated it was informed on July 28, 2023 by an email from Apple Root Program member Rebecca Kelley that it had not responded to the survey sent on June 22, 2023. Disig said it did not stop certificate issuance, stating the incident did not produce misissued certificates. After becoming aware of the issue, Disig initiated an internal investigation and confirmed the cause was that the survey was overlooked because the deadline was not consistently marked on the CA manager’s calendar, with additional distraction due to PC problems. Disig completed the survey and submitted it to Rebecca Kelley by email on July 31, 2023, and indicated it took preventive measures to ensure similar problems do not recur. The bug was resolved as FIXED, and Mozilla indicated it intended to close the matter on September 29, 2023 if no further questions or comments were raised.
- Apple sent Disig the “Apple CA Communication | 2023 Root Policy Update and Survey” as part of the Apple Root Program.
- Disig was informed by Apple Root Program member Rebecca Kelley that it had not responded to the survey.
- Disig completed and submitted the Apple Root Program survey by email after initiating an internal investigation.
- Mozilla closed the case as FIXED (bug status RESOLVED).
- Disig, a.s. — Peter Miskovic described how Disig became aware of the missed Apple Root Program survey, the investigation findings, and the steps taken to complete the survey and prevent recurrence.
- Mozilla representative — Mozilla stated it intended to close the matter on Friday, 29-Sept-2023, absent additional questions or comments.