Hi list,
Consider the following situation.
User A (new owner) issues a transfer on domain example.com. Fills in contact data, using an existing profile. Then the domain is transfered, and is attached to the profile. Contact data remain the same (until modified).
Now user B (old owner), or basically anyone requests a password for example.com. He receives it to the admin contact e-mail (his e-mail). With this password, user B will now be able to login to user A's profile, and manage ALL domains associated with that profile.
Now, do I misunderstand something, or is the above thinking correct?
Regards, - Csongor
