← Google Trust Services LLC cases
Bugzilla #2019619 Trust Bit Enablement

Google Trust Services Root Strategy Plan

ASSIGNED Google Trust Services LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

This case is about Google Trust Services submitting a root strategy plan to change trust-bit usage for several of its roots. In the plan, GTS R1 (TLS-only) would have the email trust bit removed, and GTS R2 (S/MIME-only) would have the websites trust bit removed. The plan also specifies that GTS R3 (TLS-only) would remove the email trust bit only while keeping the website trust bit, and that GTS R4 (TLS-only) and GSR4 (TLS-only) would remove the email trust bit. The submitter stated that the changes can be made immediately and that no target date needs to be set. The bug is currently in ASSIGNED status, with Mozilla assigned to Ben Wilson (b**********n@mozilla.com).

Model: gpt-5.4-nano Generated: 2026-06-13 21:38 UTC Revised: 2026-06-16 18:52 UTC Confidence: 0.86 1 comment
Chronology
  1. Google Trust Services submitted a root strategy plan proposing trust-bit removals for multiple roots.
Thread Activity
  1. Google representative — Google Trust Services provided its root strategy plan, listing specific trust-bit removals for GTS R1, GTS R2, GTS R3, GTS R4, and GSR4 and stated the changes can be made immediately without a target date.
Participants
Google representative Mozilla representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
#1166723 RESOLVED Trust Bit Enablement Public Discussion Opened By Ca Single Ca Owner Opened 2015-05-20 · Closed 2022-11-14 · 58% similar
Request for additional D-Trust root Integration with trust bit "email" (Non-TLS).
#745671 RESOLVED Trust Bit Enablement Opened 2012-04-16 · Closed 2022-11-14 · 58% similar
Enable EV and Turn on Code Signing trust bit for TWCA Root certificate
#1176188 RESOLVED Trust Bit Enablement Opened 2015-06-19 · Closed 2022-11-14 · 58% similar
Enable email trust bit for Actalis Authentication Root CA
#515425 RESOLVED Trust Bit Enablement Opened 2009-09-09 · Closed 2022-11-14 · 57% similar
Request to enable code-object-signing "trust bit" for DigiCert's three Root CAs
#1711598 RESOLVED Trust Bit Enablement Opened 2021-05-17 · Closed 2023-05-03 · 56% similar
Provide APIs and OAuth for Microsoft to automate their root store updates to CCADB
#577665 RESOLVED Root Inclusion Trust Bit Enablement Opened 2010-07-09 · Closed 2022-11-14 · 39% similar
Add Trustis FPS Root CA certificate
#1277336 RESOLVED Root Inclusion Trust Bit Enablement Ev Enablement Opened 2016-06-01 · Closed 2022-11-14 · 39% similar
Add SSL.com root certificate(s)
#1882904 RESOLVED Security Incident Opened 2024-02-29 · Closed 2025-02-12 · 39% similar
Google Trust Services: Incorrect OCSP responses for new ICAs under test

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action