Note that:

- the gaining registrar is bound to verify the request, in fact the 
liability is all theirs, most do a decent job of this
- if a name is in fact transferred in error, it always comes out in the 
wash and gets returned
- if you get caught doing this, you can be charged and sued, so, ahem, pay 
in cash :)

Certainly emphasizes a couple of things:

- admin contact should be vigilant
- we need to release a lock function (coming quite soon AFAIK)

Also, please note that worrying about name being stolen this way is like 
worrying about getting hit by a car when leaving the house... except that 
getting hit by a car is far more likely, and you can not reverse the long 
term damage completely!

sA

At 02:33 PM 12/19/01 -0500, Mike Allen wrote:
>Wow Chuck...
>
>
>   You mean if the request isn't denied, after the 5th day it is
>automatically approved!!  I didn't know that, thanks for telling me... My
>god, that means if I knew when someone was going on vacation I could but a
>request in for a transfer, and when the poor sap gets back then his domain
>has been transferred without his knowledge, and that would give me the
>opportunity to speak to the new registrar or in some form and try to steal
>the site...  If nothing else, if I hated the owner I could spend a couple
>dollars and transfer the site to Nis so that he would have the grief of
>trying to get it re-transferred and or be stuck with their high fees... I
>know this scenario is pretty far fetched, but I for one would want my
>domains to NOT automatically transfer like that.  I guess everyone has their
>own opinions and or feelings on the subject... I know if I hated someone bad
>enough, it would be worth the $35 dollars to transfer it to NIS to give them
>some grief.  (Thank GOD I don't hate anyone that bad!)
>
>Mike Allen, 4CheapDomains.Net
>[EMAIL PROTECTED]
>http://www.4CheapDomains.Net
>(812) 275-8425 - Office
>(815) 364-1278 - Fax
>
>----- Original Message -----
>From: "Charles Daminato" <[EMAIL PROTECTED]>
>To: "Spy OpenSRS Mail" <[EMAIL PROTECTED]>
>Cc: <[EMAIL PROTECTED]>
>Sent: Wednesday, December 19, 2001 1:39 PM
>Subject: Re: Yo TUCOWS what's up with this?
>
>
> > Actually, re-reading through below I know the issue.  The transfer request
> > was placed on the 13th at 2pm.  He emails you on the 19th at almost 1pm -
> > that's more than 5 days after the transfer request got to us, which means
> > it went away before he tried.  Hence the issue.
> >
> > Sorry Lars :)
> >
> > Charles Daminato
> > TUCOWS Product Manager
> > [EMAIL PROTECTED]
> >
> > On Wed, 19 Dec 2001, Spy OpenSRS Mail wrote:
> >
> > > A customer unknowingly began a transfer from a competitor solicitation.
> > > Then after calling us we informed him to NOT confirm/authorize the
>transfer.
> > > He declined it. But TUCOWS still let it go. Whoopsy.
> > >
> > > So five minutes ago the reseller for Enom calls us saying the customer
> > > declined the transfer and TUCOWS still sent it over to them.
> > >
> > > The Enom reseller says they can't send it back. That TUCOWS has to
>generate
> > > a request to send it back.
> > >
> > > Meanwhile the customer did win out here. They refunded the customers 2
>year
> > > renewal but agreed to leave the 2 years on the domain.  I suppose when
>we
> > > get it back with a year added to it the customer will have paid one year
> > > with us and benefited with three.
> > >
> > > But what would you have us do to get it back? Generate a transfer
>request?
> > > In the end, I'd like to know has anyone had a similar situation?  And
>what
> > > our friends at TUCOWS can do to stop allowing unauthorized transfers to
> > > complete. If this is an anomaly, let me know.
> > >
> > > Regards,
> > > Lars Hindsley
> > > SpyProductions
> > >
> > > Here is the string of correspondence with our customer. :)
> > >
> > >
> > > -----Original Message-----
> > > From: Jim Hughes [mailto:[EMAIL PROTECTED]]
> > > Sent: Wednesday, December 19, 2001 12:51 PM
> > > To: OpenSRS Transfers; Lars Hindsley
> > > Subject: Re: Transfer Request away has been received for the domain
> > > laurelhollow.org
> > >
> > >
> > > Please reverse the request!
> > >
> > > I tried to deny it.  and the system wont let me.
> > >
> > > Please help keep the domain with SPY
> > >
> > > Thanks, Jim Hughes
> > >
> > > OpenSRS Transfers wrote:
> > >
> > > > A request has been received to transfer the domain laurelhollow.org
> > > > away from the Registrar Tucows. This request was entered at
>13-Dec-2001
> > > 14:14:26
> > > > by eNom, Inc.
> > > >
> > > > If this is a valid request and you wish to approve this transfer,
> > > > please visit the following url and follow the instructions:
> > > > https://rr-n1-tor.opensrs.net/transfers/index.cgi?away=1
> > > >
> > > > You will need to enter the following information to complete the
> > > > transfer:
> > > >
> > > > Domain Name: laurelhollow.org
> > > > Password: uaGz3zWWPj
> > > >
> > > > If you do not wish to approve this transfer, you must visit the URL
> > > > above, and use the Domain Name and Password shown to Decline it.
> > > > Accepting this transfer will change the registrar of record for your
> > > > domain from Tucows, to eNom, Inc..If you are receiving this
> > > > email, you should have initiated, or at least been aware of this
> > > > request already. If this is the first time that you've heard of this,
> > > > do not accept the transfer until you are satisfied that the request is
> > > > legitimate.
> > > >
> > > > The transfer request will be automatically completed within 5
> > > > calendar days if you don't either accept or decline the request.
> > > >
> > > > Thank you.
> > > >
> > > > Team SpyProductions and Team Tucows
> > >
> > >

Scott Allan
Director OpenSRS
[EMAIL PROTECTED]

Reply via email to