<<<
Chronological Index
>>> <<<
Thread Index
>>>
RE: [gnso-irtpc] Comments on time-limiting FOA
- To: "Chris Chaplow" <chris@xxxxxxxxxxxxx>
- Subject: RE: [gnso-irtpc] Comments on time-limiting FOA
- From: "James M. Bladel" <jbladel@xxxxxxxxxxx>
- Date: Wed, 23 May 2012 09:31:43 -0700
<html><body><span style="font-family:Arial; color:#000000;
font-size:10pt;"><div>Speaking as a registrar, I agree that there should be
some *reasonable* time limits on FOAs. This is based upon seeing some
incidents of actual harm, seeing very little down side / negative impact, and a
general unease with any "indefinite" agreement with no time
boundaries.</div><div><br></div><div>Harms: We have seen a few
interesting situations where registrants have listed with two aftermarket
services, and sold with one while a "valid" FOA (from the previous registrant)
is held by the other. It is also possible that a domain name could expire
and be re-renewed or registered via a "drop", but the FOA would persist through
these critical events. To build upon real estate analogies, I believe Mikey
O'Connor once characterized this as a broken chain of title. I'm hoping
our Aftermarket participants can help us address these
issues.<br></div><div><br>Negative Impacts: Minor. Many registrars
are already doing this. Others could use the expiry of an FOA as an
opportunity to contact the registrant and determine why the transfer has not
taken place. Did the transfer fail for some reason? If the name is
listed for sale, why isn't it selling? Is the current registrant even
aware that the FOA exists? <br></div><div><br></div><div>Indefinite
Agreements: Need help from a legal-type on this, but aren't all contracts
/ agreements required to have some sort of term?
</div><div><br></div><div>My recommendation is therefore that there be a
reasonably long (45-60 days) time limit on FOAs, and that they are also
invalidated by certain events. Some draft language might
be:</div><div><br></div><div><i><b>Once obtained, an FOA is valid for (45 or
60) calendar days, or until the domain name expires, or until there is a Change
of
Registrant.</b><br></i></div><div><br></div><div>Thanks--</div><div><br></div><div>J.</div><div><br></div><div><br></div><div><br></div><div><br></div>
<blockquote id="replyBlockquote" webmail="1" style="border-left: 2px solid
blue; margin-left: 8px; padding-left: 8px; font-size:10pt; color:black;
font-family:verdana;">
<div id="wmQuoteWrapper">
-------- Original Message --------<br>
Subject: RE: [gnso-irtpc] Comments on time-limiting FOA<br>
From: "Chris Chaplow" <<a
href="mailto:chris@xxxxxxxxxxxxx";>chris@xxxxxxxxxxxxx</a>><br>
Date: Wed, May 23, 2012 9:01 am<br>
To: "'IRTPC Working Group'" <<a
href="mailto:gnso-irtpc@xxxxxxxxx";>gnso-irtpc@xxxxxxxxx</a>><br>
<br>
<style>
#wmQuoteWrapper /* Font Definitions */ @font-face {font-family:"Cambria
Math"; panose-1:2 4 5 3 5 4 6 3 2 4;}
#wmQuoteWrapper @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2
4;}
#wmQuoteWrapper @font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2
4;}
#wmQuoteWrapper /* Style Definitions */ p.MsoNormal, #wmQuoteWrapper
li.MsoNormal, #wmQuoteWrapper div.MsoNormal {margin:0cm;
margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman","serif";}
#wmQuoteWrapper a:link, #wmQuoteWrapper span.MsoHyperlink
{mso-style-priority:99; color:blue; text-decoration:underline;}
#wmQuoteWrapper a:visited, #wmQuoteWrapper span.MsoHyperlinkFollowed
{mso-style-priority:99; color:purple; text-decoration:underline;}
#wmQuoteWrapper span.apple-tab-span {mso-style-name:apple-tab-span;}
#wmQuoteWrapper span.EstiloCorreo18 {mso-style-type:personal-reply;
font-family:"Calibri","sans-serif"; color:#1F497D;}
#wmQuoteWrapper .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;}
#wmQuoteWrapper @page WordSection1 {size:612.0pt 792.0pt; margin:70.85pt
3.0cm 70.85pt 3.0cm;}
#wmQuoteWrapper div.WordSection1 {page:WordSection1;}
</style><div class="WordSection1"><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi
there,<o:p></o:p></span></div><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></div><div
class="MsoNormal" style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"
lang="EN-US">My gut feeling is that there should be a time limit on FOA
and this should be policy rather than
recommend.<o:p></o:p></span></div><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"
lang="EN-US">I do appreciate the argument not to create policy for a non
problem.<o:p></o:p></span></div><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"
lang="EN-US"><o:p> </o:p></span></div><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"
lang="EN-US">Perhaps we should help the community (and us) understand the
wisdom by expressing pros and cons of both (ie policy and best
practice) in a table in the report.<o:p></o:p></span></div><div
class="MsoNormal" style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"
lang="EN-US"><o:p> </o:p></span></div><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"
lang="EN-US">Best<o:p></o:p></span></div><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"
lang="EN-US"><o:p> </o:p></span></div><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"
lang="EN-US"><o:p> </o:p></span></div><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"
lang="EN-US"><o:p> </o:p></span></div><div><div class="MsoNormal"
style="font-size:12pt;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#0B710A">Chris
Chaplow</span></b><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#0B710A"><br></span></b><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#0B710A">Managing
Director</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#0B710A"><br></span><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#0B710A"><a
href="http://Andalucia.com";>Andalucia.com</a> S.L.</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D"><br></span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Avenida</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">
del Carmen 9<br>Ed. </span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Puertosol</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">,
Puerto </span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Deportivo</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><br>1ª
</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Planta</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">,
</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Oficina</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">
30<br></span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Estepona</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">,
29680<br>Malaga, Spain<br></span><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Tel:
+ (34) 952 897 865</span></b><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><br></span></b><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Fax:
+ (34) 952 897 874</span></b><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><br></span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">E-mail:
</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D"><a
target="_blank"
href="mailto:chris@xxxxxxxxxxxxx";><b>chris@xxxxxxxxxxxxx</b></a></span><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D"><br></span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">Web:
</span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D"><a
target="_blank"
href="http://www.andalucia.com/";><b>www.andalucia.com</b></a></span><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><br></span><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#0B850A">Information
about Andalucia, Spain.</span></b><span
style="color:#1F497D"><o:p></o:p></span></div></div><div class="MsoNormal"
style="font-size:12pt;"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></div><div><div
style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm
0cm"><div class="MsoNormal" style="font-size:12pt;"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:owner-gnso-irtpc@xxxxxxxxx";>owner-gnso-irtpc@xxxxxxxxx</a> [<a
href="mailto:owner-gnso-irtpc@xxxxxxxxx";>mailto:owner-gnso-irtpc@xxxxxxxxx</a>]
<b>En nombre de </b>Mike O'Connor<br><b>Enviado el:</b> martes, 22 de mayo de
2012 20:59<br><b>Para:</b> IRTPC Working Group<br><b>Asunto:</b> [gnso-irtpc]
Comments on time-limiting FOA <o:p></o:p></span></div></div></div><div
class="MsoNormal" style="font-size:12pt;"><o:p> </o:p></div><div
class="MsoNormal" style="font-size:12pt;margin-bottom:12.0pt">hi all,<br><br>i
would like to make the case for upgrading the time-limiting of FOA's from being
a "recommended best practice" to being a policy that is implemented across all
registrars.<br><br>here's why…<br><br>first, a replay of the current
policy:<o:p></o:p></div><div class="MsoNormal" style="font-size:12pt;">"Section
2 -- Gaining Registrar Requirements<o:p></o:p></div><blockquote
style="margin-left:30.0pt;margin-right:0cm"><blockquote
style="margin-left:30.0pt;margin-right:0cm"><div class="MsoNormal"
style="font-size:12pt;"><b>For each instance </b>where a Registered Name
Holder requests to transfer a domain name registration to a different
Registrar, the Gaining Registrar
shall:<o:p></o:p></div></blockquote></blockquote><blockquote
style="margin-left:30.0pt;margin-right:0cm"><blockquote
style="margin-left:30.0pt;margin-right:0cm"><blockquote
style="margin-left:30.0pt;margin-right:0cm"><div class="MsoNormal"
style="font-size:12pt;">2.1 <b>Obtain express authorization</b> from
either the Registered Name Holder or the Administrative Contact
(hereafter, "Transfer Contact"). Hence, a transfer may only proceed
if confirmation of the transfer is received by the Gaining Registrar from
the Transfer
Contact.<o:p></o:p></div></blockquote></blockquote></blockquote><blockquote
style="margin-left:30.0pt;margin-right:0cm"><blockquote
style="margin-left:30.0pt;margin-right:0cm"><blockquote
style="margin-left:30.0pt;margin-right:0cm"><blockquote
style="margin-left:30.0pt;margin-right:0cm"><div class="MsoNormal"
style="font-size:12pt;">2.1.1 The authorization must be made via a valid
Standardized Form of Authorization
(FOA)…."<o:p></o:p></div></blockquote></blockquote></blockquote></blockquote><div
class="MsoNormal" style="font-size:12pt;margin-bottom:12.0pt"><br><br>i've
highlighted the two phrases that speak to me, FOA's are to be obtained "for
each instance" of a transfer and are used to "obtain express authorization" of
the transfer. <br><br>the proposal to time-limit FOAs comes from the
working group that launched the long series of PDPs of which this one is the
3rd of 5. so let's take a look at the question that was posed lo
those many years ago:<o:p></o:p></div><div class="MsoNormal"
style="font-size:12pt;">Whether provisions on time-limiting Form Of
Authorization (FOA)s should be implemented to avoid fraudulent transfers out.
For example, if a Gaining Registrar sends and receives an FOA back from a
transfer contact, but the name is locked, the registrar may hold the FOA
pending adjustment to the domain name status, during which time the registrant
or other registration information may have changed.<o:p></o:p></div><blockquote
style="margin-left:30.0pt;margin-right:0cm"><div class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></blockquote><div><div
class="MsoNormal" style="font-size:12pt;">it seems to me that the need to limit
the time that an FOA is implied by the "avoid fraudulent transfers out" phrase
in that question.<o:p></o:p></div></div><div><div class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></div><div class="MsoNormal"
style="font-size:12pt;">i prefer a policy stance which addresses the security
needs of the typical domain registrant (an individual or corporation that uses
the domain name) while providing a mechanism where the ease-of-use needs of the
relatively-unusual domain-investor can still be addressed. here's how i'd
prefer to see our recommendation phrased.<o:p></o:p></div><div><div
class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></div><blockquote
style="margin-left:30.0pt;margin-right:0cm"><div><div class="MsoNormal"
style="font-size:12pt;">"Therefore the WG recommends Section 2 of the IRTP be
revised to insert the following section:<o:p></o:p></div></div><div><div
class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></div><div><blockquote
style="margin-left:30.0pt;margin-right:0cm;border-width:initial;border-color:initial"><div
class="MsoNormal" style="font-size:12pt;">2.1.4 The FOA will expire when the
requested-transfer is complete, it is renewed by the Registered Name Holder, or
in 30 calendar days, which ever comes first.
"<o:p></o:p></div></blockquote></div></blockquote><div><blockquote
style="margin-left:30.0pt;margin-right:0cm;border-width:initial;border-color:initial"><div
class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></blockquote><div
class="MsoNormal" style="font-size:12pt;">my hope is that by introducing the
notion of renewing an FOA, we can accommodate the registrant (and registrars)
that would like to:<o:p></o:p></div></div><div><div class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></div><div><div
class="MsoNormal" style="font-size:12pt;">-- "pre-authorize" a transfer for
months or even years (presumably with suitable security around that
process)<o:p></o:p></div></div><div><div class="MsoNormal"
style="font-size:12pt;">-- provide a framework that they can explicitly enter
into agreements to "auto-renew" the FOA indefinitely if they so
choose <o:p></o:p></div></div><div><div class="MsoNormal"
style="font-size:12pt;">-- support a variety of manual or auto-renew processes
that can vary across registrars.<o:p></o:p></div></div><div><div
class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></div><div><div
class="MsoNormal" style="font-size:12pt;">i'm hoping that with this, we make it
possible for high-volume domain investors to put a "buy it right now" sign on
their names over long periods of time but still provide enhanced security for
the vast majority of registrants who are simply using the name to conduct their
day-to-day affairs.<o:p></o:p></div></div><div><div class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></div><div><div
class="MsoNormal" style="font-size:12pt;">as i said on the call, i'm cranky
about relegating this to a "best practice." i think that approach solves
the problems of the few at the expense of the
many.<o:p></o:p></div></div><div><div class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></div><div><div
class="MsoNormal" style="font-size:12pt;">mikey<o:p></o:p></div></div><div><div
class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></div><div><div
class="MsoNormal" style="font-size:12pt;"><o:p> </o:p></div><div><div
class="MsoNormal" style="font-size:12pt;">- - - - - - - - -<br>phone <span
class="apple-tab-span"> </span>651-647-6109 <br>fax <span
class="apple-tab-span">
</span>866-280-2356 <br>web <span
class="apple-tab-span"> </span><a target="_blank"
href="http://www.haven2.com";>http://www.haven2.com</a><br>handle<span
class="apple-tab-span"> </span>OConnorStP (ID for public places like Twitter,
Facebook, Google, etc.)<o:p></o:p></div></div><div class="MsoNormal"
style="font-size:12pt;"><o:p> </o:p></div></div></div>
</div>
</blockquote></span></body></html>
<<<
Chronological Index
>>> <<<
Thread Index
>>>
|