← Google Trust Services LLC cases
Bugzilla #1873739
Policy Document Issue
Google Trust Services: uses "DNSSec-mostly" and DTPs for DNS resolution
RESOLVED
INVALID
Google Trust Services LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves Google Trust Services (GTS) and its use of Google Public DNS and Cloudflare as DNS resolvers for domain validation. Concerns were raised regarding whether GTS's reliance on these services constituted the use of a Delegated Third Party (DTP) and whether it complied with the CA/Browser Forum's Baseline Requirements. GTS clarified that it operates its own DNSSEC validator and does not consider Google Public DNS a DTP, as its usage is within the scope of its WebTrust audit. The case was ultimately resolved as invalid, with the conclusion that GTS's practices did not violate the Baseline Requirements.
Chronology
- Bug created regarding GTS's DNS validation practices.
- Case closed as invalid after GTS's clarifications.
Thread Activity
- Ltri representative — Created attachment detailing DNS validation concerns.
- Google representative — GTS explained its DNS validation process and addressed DTP concerns.
- Mozilla representative — Indicated intention to close the case as invalid.
- Mozilla representative — Confirmed closure of the case as invalid.
Participants
Community commenter
External References
Similar Local Cases
SECOM: CP/CPS does not clearly specify domain validation methods
Camerfirma: CP/CPS of Intesa Sanpaolo Sub-CA is Non-Compliant
Microsoft PKI Services: Policy Documentation, Failure to update Subscriber Certificate Max Validity Period
KIR S.A.: CP/CPS contains noncompliant DV method, does not specify CAA domains
FNMT: CP/CPS lack CAA processing details
eMudhra emSign PKI Services: Policy Document Inconsistency
Firmaprofesional: 2022 - Define Device Obsolescence Process
Amazon Trust Services: CP/CPS does not specify key compromise methods