At 3/16/02 1:50 PM, David Kaufman wrote:

>i can see why, operationally, you don't "deem" this an emergency.  you are
>defining an an emergency as something that your 24/7 staff can take care of,
>and apparently your "compliance/dispute folks" don't work 24/7.
>
>but i suspect that if you ask any one of these compliance/dispute folks how
>many Tucows customers they have helped to resolve a hijacked domain that did
>*not* consider the theft of their identity an emergency, the answer would be
>zero.

So what is OpenSRS going to do at 8 PM Friday night? Call up the 
currently listed registrant (perhaps a business phone) and leave a 
message demanding that they fax over documentation proving that they 
didn't "hijack" the domain, and they'll lose the domain if they don't 
reply before 6 AM Saturday?

The original reseller still hasn't told us how he thinks this domain was 
"hijacked", either this time or the previous time. There's no indication 
it had anything to do with a flaw at OpenSRS. To the contrary, the domain 
is still with the original reseller, so I'd say there's a good chance it 
was "hijacked" because a) someone guessed the user's password and now 
appears to have the full right to use it, just as if he bought it; or b) 
it's a legitimate domain sale that's now fallen into dispute between the 
parties and the seller is trying to get it back; or c) a court order 
changed the domain's ownership.

In none of those cases should the domain name's ownership be "changed 
back" without a thorough investigation and consultation with lawyers, 
etc., which would probably take several business days at best. Forcing 
compliance people to wear pagers so they can start the process at 3 AM 
seems cruel and unusual (and pointless).


>that just sounds darned likely to be quoted in the press the following week
>(perhaps at the nudging of one of your larger and more media-savvy corporate
>competitors ...cough cough Verisign) as: "Theft of Service Not a Priority
>for OpenSRS, says Product Manager"

How about "OpenSRS doesn't change domain ownership without a thorough 
investigation by our legal staff during business hours, says Product 
Manager"? That's closer to what he actually said, and sounds quite 
reasonable to me.

--
Robert L Mathews, Tiger Technologies

"The trouble with doing something right the first time is that nobody
appreciates how difficult it was."

Reply via email to