> On 23 Nov 2020, at 23:55, Patrick Mevzek <p...@dotandco.com> wrote:
> 
> 
> 
> On Mon, Nov 23, 2020, at 16:50, Taras Heichenko wrote:
>> Just a question: How can a registrar accept the transfer of a domain by 
>> a user if it does
>> not check that this domain is owned by this user?
> 
> You may want to look at <domain:authInfo> ...
> 
> This is completely orthogonal to anything related to email addresses.
> Long gone are the days when only an email sent was enough to trigger a 
> transfer,
> and for good reasons.

I said nothing about only an email address but complete contact information. 
Most
of our registrars were checking an entire Contact object to identify the user 
requesting
a transfer to avoid court. From their point of view, the only password for a 
domain does
not provide enough protection to a domain transfer. I know that there are other 
ways of
transfer. You may want to look at different registrar's agreements...

> 
> -- 
>  Patrick Mevzek
>  p...@dotandco.com
> 
> _______________________________________________
> regext mailing list
> regext@ietf.org
> https://www.ietf.org/mailman/listinfo/regext

--
Taras Heichenko
ta...@academ.kiev.ua





_______________________________________________
regext mailing list
regext@ietf.org
https://www.ietf.org/mailman/listinfo/regext

Reply via email to