← Google Trust Services LLC cases
Bugzilla #1948368
Certificate Problem Report
Google Trust Services: Self-audit tooling MPIC perspective verification inconsistency
RESOLVED
FIXED
Google Trust Services LLC
AI Summary
Google Trust Services (GTS) identified a bug in their self-audit tooling that affected the verification of MPIC perspectives used in domain control validation. The issue arose from the tool incorrectly accepting corroborating perspective entries as authoritative, rather than requiring a primary perspective. GTS promptly fixed the bug and conducted a thorough historical analysis, confirming no mis-issuance occurred. They have implemented measures to prevent similar issues in the future and completed all action items related to the incident.
Chronology
- Bug detected during preparation for MPIC requirements.
- Preliminary report published to Bugzilla.
- Closure report submitted, all action items completed.
Participants
Google Trust Services
Mozilla
External References
Similar Local Cases
Google Trust Services: Failure to properly validate IP address
Google Trust Services: Incorrect OCSP responses for new ICAs under test
Google Trust Services: Missing authorization audit log entry for certificate issuance
Google Trust Services: Short OCSP outage
Google Trust Services: Outdated BR version in some validation records
Google Trust Services: Failure to revoke subscriber certificates within BR timeframe
Google Trust Services: OCSP serving issue 2020-04-09
Google Trust Services: Inconsistent MPCAA secondary perspective logging