ACCV: Delayed response to CPR
This case concerns ACCV’s delayed response to a Certificate Problem Report (CPR). ACCV stated that it took several days to respond to a notification of problems in the issuance of certificates, which it said breached point 4.9.3 of the BR, and that the CPR was not acknowledged within the due time. ACCV attributed the delay to its support team treating an email from the problem reporting mechanism as non-urgent and forwarding it for routine review, because the reporting address (a**********v@accv.es) was a generic organizational mailbox and there were no precedents of similar messages. ACCV opened a CCADB case to modify the email address associated with the problem reporting mechanism from a**********v@accv.es to p**********g@accv.es. ACCV reported that the reviewer confirmed the mechanism and that the new email address was p**********g@accv.es. The bug was marked RESOLVED with resolution FIXED, and ACCV stated no further action was pending while monitoring until closure.
- An external observer emailed a**********v@accv.es about a possible issuance problem, and it was not treated as urgent.
- ACCV’s routine review detected a warning involving incorrectly issued certificates.
- ACCV opened a CCADB case to change the problem reporting mechanism email address to p**********g@accv.es.
- The root store reviewer confirmed the problem reporting mechanism and the new email address was set.
- Mozilla indicated it would close the bug on or about 10-July-2024 unless additional items remained.
- Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Opened a preliminary incident report stating ACCV responded to a CPR several days late and did not acknowledge it within due time, citing BR point 4.9.3, and described root cause and action items.
- Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Reported that ACCV opened a CCADB case to modify the problem reporting mechanism email address from a**********v@accv.es to p**********g@accv.es, pending reviewer confirmation.
- Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Confirmed the reviewer verified the mechanism and that the new email address is p**********g@accv.es.
- Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Stated no further action was pending and that ACCV would monitor the bug for questions.
- Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Stated no further action was pending and that ACCV would monitor until the bug was closed.
- Community commenter — Asked whether the original report was preliminary or final.
- Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Confirmed the report is final and said the template mistakenly included it as preliminary.
- Mozilla representative — Said the bug would be closed on or about 10-July-2024 unless additional items needed discussion.