Google Trust Services: Failure to properly validate IP address

Google Trust Services (GTS) reported a failure in validating an IP address, which led to the revocation of all affected certificates. The issue stemmed from a manual validation process that did not meet the necessary standards. GTS has since implemented several corrective actions, including updating validation procedures, enhancing automation, and ensuring compliance with the Baseline Requirements. All action items related to this incident have been completed, and continual compliance monitoring has been enabled in production. GTS is monitoring the situation and has requested closure of the incident.

1. 2024-01-25 GTS investigates an IP validation issue and revokes affected certificates.
2. 2024-04-04 Continual compliance monitoring for validation flat files is enabled in production.

1. 2024-01-25 Google representative — GTS is investigating an IP validation issue that occurred when validating a single IP address. All affected certificates have been revoked.
2. 2024-02-29 Google representative — GTS implemented immediate process changes to mitigate the issue leading to this data preservation gap.
3. 2024-04-05 Google representative — GTS has completed the remaining action item to implement continual compliance monitoring for validation flat files.
4. 2024-04-12 Google representative — GTS continues to monitor this bug for questions or comments.
5. 2024-04-15 Mozilla representative — I'll close this on Wed. 17-Apr-2024.