Robert L Mathews wrote:
>> Also, for paragraph 25, can one enter into a blanket agreement with
>> OpenSRS, to block all outgoing transfers unless the losing registrar
>> confirmation is accepted?
>
> Ummmm... hmmm. That wouldn't make sense, would it? If the registrant
> has an extra side-contract with the registrar that provides that a
> certain domain name must not be transferred under any circumstances,
> the transfer should be rejected out of hand regardless of whether the
> confirmation is responded to.
And what if unscrupulous domain registrars (Do they exist? No way, no
chance, not a one!) were to use that "Contract may be modified at any time"
clause most of them have in there, add it to the standard registration
agreement.
It's an unfortunately difficult situation to create a mechanism that
protects legitimate domain owners who happen to take a few days off work, or
who have overly strict spam filters, vs preventing a pain-in-the-butt
registrar from restricting outbound transfers under the "my client told me
to do so" cloak.
Personally, I don't see a way around this, other then via a thick registry
which would have authoritative contact information and the ability to manage
transfers and locks securely.
> The only possible protection against this kind of attack is a domain
> lock that can't be disabled without some sort of out-of-band
> agreement, such as a notarized letter that's confirmed by the
> registrar. Such a lock would need to completely override the response
> to any transfer confirmation (or lack thereof) in order to be useful.
I wouldn't mind being able to lock a domain against transfers, but not lock
it against modifications. I realize the registry isn't that specific, but
OpenSRS could implement it by allowing manage.cgi to unlock the domain,
apply the data, then relock the domain.
Of course, I also trust OpenSRS to release my domains if I decide to
transfer away.
-- Dave Warren, Email Address: dave.warren@devilsplayground.net Cell: (403) 371-3470 Fax: (403) 371-3471 Toll free: (888) 371-3470 Vonage: (817) 886-0860 ICQ: 17848192 AIM: devilspgd Yahoo!: devilspgd MSN/PASSPORT: dave.warren@devilsplayground.net
This archive was generated by hypermail 2.1.3 : Tue Oct 19 2004 - 23:37:54 EDT