For a smaller RSP that knows their customers, this may make a difference.
For larger RSPs, they will be fooled just as easily as OpenSRS.

----- Original Message -----
From: "Thomas Mon" <[EMAIL PROTECTED]>
To: "opensrs discuss" <[EMAIL PROTECTED]>
Sent: Tuesday, March 19, 2002 3:24 PM
Subject: Re: hijacking, AGAIN


> One thing that can be done is this....
>
> Anytime a contact needs to be updated like this in the RWI there can be a
> form that the RSP needs to fill out saying, "Yeah, we know that a change
is
> coming in via FAX to you within the next 7 days."  This way, when faxes
come
> in, all OpenSRS folk have to do is verify against this "admin contact
> change" list to see if this change was expected and that the RSP manning
the
> front lines KNOWS about it... I think then at this point that OpenSRS
should
> be absolved of any checking beyond making sure that the RSP used the RWI
to
> "pre-authorize" OpenSRS to make the change.
>
> In fact, to make it even better, the incoming FAX has to have a tracking
> number on it.

-- 
The nice thing about standards, there is enough for everyone to have their own.


Reply via email to