iTrusChina: Failure to Respond to Feb 2026 Chrome Root Program Survey
iTrusChina reported an incident in which it failed to respond to a survey from the Chrome Root Program Team about Chrome Root Policy v1.8 before the Feb 26, 2026 deadline. The Chrome Root Program Team informed iTrusChina on Mar 3, 2026 that the survey response was not received, which iTrusChina stated was considered a violation of Chrome Root Policy. In its incident report, iTrusChina attributed the failure to its new Email Security Gateway wrongly quarantining the Chrome Team’s survey and reminder emails, and to inadequate management of quarantined email lists. iTrusChina said it responded to the survey after receiving the notification and took remediation steps, including adjusting the Email Security Gateway’s quarantine rules and adding whitelists, and establishing a mechanism to enhance management of quarantined email lists with daily quarantine notifications to email receivers. iTrusChina also stated that its investigation found additional contributing issues: an ISP block of some overseas IPs and Spamhaus.org blacklisting due to incorrect HELO/EHLO configuration, and that it contacted the ISP to whitelist overseas IPs and adjusted HELO/EHLO configuration and requested unlocking its IPs. The bug was resolved as FIXED, and iTrusChina requested closure after stating all action items were completed as described.
- iTrusChina did not respond to the Chrome Root Policy v1.8 survey by the Feb 26 deadline.
- Chrome Root Program Team notified iTrusChina that it had failed to respond to the survey.
- iTrusChina submitted an incident report and remediation plan in the bug.
- iTrusChina provided a report closure summary and requested closure.
- iTrusChina Co., Ltd. — Submitted a full incident report describing the missed Chrome Root Policy v1.8 survey response and root causes, and listed remediation actions.
- iTrusChina Co., Ltd. — Stated iTrusChina was monitoring the bug and that action items were finished, marking gateway quarantine-rule adjustments and quarantined-email-list management as Done.
- Community commenter — Questioned whether action items could be marked Done before investigating and disclosing the 'unknown reasons' for not receiving the first survey email.
- iTrusChina Co., Ltd. — Responded that IT was investigating the failure to receive the first email and would provide feedback ASAP.
- iTrusChina Co., Ltd. — Reported investigation results for the first-email failure, including ISP blocking of some overseas IPs and Spamhaus.org blacklisting due to HELO/EHLO misconfiguration, and described remediation steps.
- iTrusChina Co., Ltd. — Said iTrusChina was monitoring the bug and would provide more information if needed.
- iTrusChina Co., Ltd. — Provided a report closure summary, reiterated root causes and remediation, and requested closure after stating all action items were completed.
- CCADB representative — Issued a final call for comments and indicated the incident report would be closed around 2026-04-10 if no further comments were received.