GoDaddy: Delayed revocation

GoDaddy experienced a delay in revoking certificates due to issues with their email reporting system. A number of certificates with compromised keys were reported but not revoked in a timely manner because emails containing the reports were quarantined by malware filters. After identifying the issue, GoDaddy took corrective actions, including updating their email configurations and introducing a web-based form for reporting certificate problems. All affected certificates were eventually revoked, and GoDaddy has committed to monitoring their reporting processes to prevent future delays.

1. 2025-01-21 Bugzilla case filed reporting delayed revocation of certificates.
2. 2025-01-28 GoDaddy provided an incident report detailing the root cause and remediation steps.
3. 2025-04-28 GoDaddy launched a web-based form for certificate problem reporting.