Having Icann change things could take a Long time.
Scott Allan from Opensrs has said that opensrs will provide a solution to
this problem. (IMO, it's a security hole.) Contacting him directly might
show how many resellers are concerned about this, and perhaps bump up the
ETA for the solution.
swerve
> From: Nigel Roberts <[EMAIL PROTECTED]>
> Organization: Island Networks (Registrar) Limited
> Date: Thu, 21 Sep 2000 11:08:42 +0100
> To: Alex Kells <[EMAIL PROTECTED]>
> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
> Subject: Re: [nom-steer] Unauthorised Registrar Transfers...
>
> Write to the President of ICANN
> who is [EMAIL PROTECTED] (Mike Roberts, no relation!)
>
> Additionally, ISTR that a Nominet board
> member (Rob B.) is also a member of the ICANN
> board. You might want to talk to him about this.
>
> Incidentally my own comments would be always to be
> more rather than less robust in any dealings with
> ICANN . . . (on almost any subject, that is)
>
> Nigel ROBERTS
> (former member of the ICANN Names Council)
>
>
>
> Alex Kells wrote:
>>
>> Apologies for the x-posting, but this is kinda important...
>>
>> How safe are your domains???
>>
>> Example:
>>
>> Registrar X makes a request to transfer a domain away from Registrar Y.
>>
>> Said domain is hosted by us, for our client.
>>
>> Apparently the ICANN approved procedure for registrar transfers is that the
>> onus is on the receiving Registrar (Registrar X) to make sure the request is
>> legitimate ie from the Registrant. And because of this the losing Registrar
>> (Registrar Y) will just approve the transfer *without* contacting the
>> Registrant, or the tech or admin contacts...
>>
>> So the Tech contact receives an email, after the fact, to say that Registrar
>> Y has approved the transfer to Registrar X, fait accompli.
>>
>> Meantime, the Registrant of the domain has absolutely no idea any of this
>> has happened.
>>
>> After spending many hours on the phone and various emails back and forth,
>> both Registrars agreed there had been a "clerical error" and the domain is
>> being transferred back to the original Registrar (note: the Registrant name
>> and all the contacts were also changed during the transfer).
>>
>> The receiving Registrar has apologised for the "clerical error" so
>> everything's rosy :-/
>>
>> Now, what's wrong with this picture? Let me repeat...
>>
>> The onus is with the receiving Registrar to make sure the request is
>> legitimate and no checks are made by the losing Registrar.
>>
>> And the only recourse for a Registrant whose domain is transferred away from
>> them due to a "clerical error" is to make a complaint to ICANN, with the
>> threat that the receiving Registrar may lose their accreditation.
>>
>> So, anyone know the procedure for making a complaint to ICANN?
>>
>> --
>> Alex Kells <[EMAIL PROTECTED]> Frontier Internet Hostmaster
>> Frontier Internet Services Limited http://www.frontier-internet.ltd.uk
>> Tel: 020 7510 4713 Fax: 020 7531 9930
>> All statements made are subject to Frontier's Terms and
>> Conditions of Business which are available upon request.
>>
>> *** The views expressed in this email are wholly my own and do not reflect
>> those of my employer ***
>>
>> -
>> Nominet UK Steering Committee Mailing List
>
