Hi Fagyal, Domain ownership is determined by owner contact, but access to domain is determined by access to profile, and its' username/password information. For that reason, profile should closely resemble ownership, and best practice is to use profile for all domains that belong to one user, and one user only.
It's really not a good practice to throw different people's domains into the same profile. This is actually impossible for end-users to do on their own; when placing an order, if one want to assign it to the existing profile, one needs to know username and password of that profile; end-user would not have that information, unless it's the owner of the profile. It's only service providers that may do that, if they have u/p of their customers. Once again, please don't do it, it's not a good practice, even if you manage domains of all your customers. One example of the possible problems is the one you described. Regards, ------------------------------------ Zeljko Dimic Technical Product Manager [EMAIL PROTECTED] Tucows Inc. 96 Mowat Avenue Toronto, ON, M6K 3M1 Canada tel: 416.535.0123 x 1256 fax: 416.531.5584 ------------------------------------ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Fagyal Csongor Sent: Thursday, September 16, 2004 9:29 AM To: discuss-list Subject: Transfer question Hi list, Consider the following situation. User A (new owner) issues a transfer on domain example.com. Fills in contact data, using an existing profile. Then the domain is transfered, and is attached to the profile. Contact data remain the same (until modified). Now user B (old owner), or basically anyone requests a password for example.com. He receives it to the admin contact e-mail (his e-mail). With this password, user B will now be able to login to user A's profile, and manage ALL domains associated with that profile. Now, do I misunderstand something, or is the above thinking correct? Regards, - Csongor
