Charles Daminato wrote:
> I've read the comments on this thread and will be discussing this
> internally to see what will be done. Please expect something today or
> tomorrow from myself or our Compliance department.
Chuck,
Could you also please post to the list the actual steps and authorizations
required for an RSP <-> RSP transfer?
>From what I understand of this thread, it appears that RSP's are getting
notified of RSP<->RSP transfer requests that didn't come from the domain
name owner. I also understand that OpenSRS is sending an approval e-mail to
the administrative e-mail contact. So, perhaps I'm not understanding
something here.. I would expect that OpenSRS would require the transfer to
be approved by the administrative e-mail contact before doing *ANYTHING*,
since until the transfer is approved it's not known to be valid. Perhaps the
problem is simply that you are notifying RSP's before you have received
approval from the administrative e-mail contact.
I don't think any RSP's (either gaining or loosing) want to have any role in
the authentication process. It's too messy to implement and leaves room for
abuse or negligence or mistakes. The authentication process should be
totally implemented by and internal to OpenSRS, just as with
registrar<->registrar transfers.
But then, since I don't know the exact details of the transfer process (and
it appears to be somewhat different than the registrar<->registrar
transfers), I'd appreciate your posting the actual steps and authorizations
required for an RSP<->RSP transfer to get everyone on the same page. This
should lead to some more insightful discussion and recommendations on the
list
Thank you!
David
