At 2/9/04 8:29 AM, George Kirikos wrote:
>Also, for paragraph 25, can one enter into a blanket agreement with
>OpenSRS, to block all outgoing transfers unless the losing registrar
>confirmation is accepted?
Ummmm... hmmm. That wouldn't make sense, would it? If the registrant has
an extra side-contract with the registrar that provides that a certain
domain name must not be transferred under any circumstances, the transfer
should be rejected out of hand regardless of whether the confirmation is
responded to.
Presumably the reason a registrant would want such a thing (instead of
just using domain locking, which adequately protects against rogue
registrars) is the fear that someone might be able to fraudulently
approve a transfer confirmation request by stealing the domain password,
then unlocking the domain and updating the admin contact.
The only possible protection against this kind of attack is a domain lock
that can't be disabled without some sort of out-of-band agreement, such
as a notarized letter that's confirmed by the registrar. Such a lock
would need to completely override the response to any transfer
confirmation (or lack thereof) in order to be useful.
-- Robert L Mathews, Tiger Technologies http://www.tigertech.net/"Ignorance more frequently begets confidence than does knowledge." -- Darwin
This archive was generated by hypermail 2.1.3 : Tue Oct 19 2004 - 23:37:54 EDT