Re: [gnso-irtpc] Charter Question B

["Mike O'Connor" <mike@xxxxxxxxxx>]

hey Bob,

i'm OK with your change, but have one more thing to put under your thinking cap.

could we work something into the pre-authorization process that notifies ALL 
the contacts when such a pre-authorization is done and requires them to 
acknowledge it?  presumably this wouldn't be a burden, because it's being done 
well in advance of any transfers.   

here's what i'm trying to fix.  

        - a Bad Guy comes in and steals my credentials

        - first thing he does is turn off all the "safety net" stuff (FoAs, 
60-day locks, etc.)

        - then he steals the name since all the controls have been defeated

it seems to me that a way to provide a defense would be to require really 
extensive notification and acknowledgement *at the time that the safety 
features are turned off* -- that way the odds increase that the rightful owner 
will detect the bad actor and quickly act to block the request.  

i realized that i'd left a huge security hole in my proposal.  i think this 
would fix it.

whatcha think?

mikey


On May 30, 2012, at 6:50 AM, Bob Mountain wrote:

> Hello All,
> Some proposed edits to the FoA language for pre-athorized transfers.
> Tks Mtn.
> 
> 
> -- 
> Bob Mountain
> Senior Vice President
> Business Development
> <5863E989-8F47-4DB5-82A6-D439BE1969A7[41].png>
> E: mtn@xxxxxxxxxxxxx
> P: +1 781.839.2871    F: +1 781.839.2801  C: +1 508-878-0469
>  
> Visit us at NameMedia.com
>  
> CONFIDENTIALITY NOTICE: This e-mail and any documents attached to it may 
> contain confidential or proprietary information or content. The transmission 
> is intended solely for the information or use of the individuals addressed, 
> or copied, as intended recipients. If you are not a named recipient, or you 
> were otherwise sent this by mistake, you are hereby notified that any 
> disclosure, copying, distribution or taking of any action as a result of or 
> in reliance on the contents of this e-mail is strictly prohibited. If this 
> message has been received in error, please delete it immediately and notify 
> the sender by return e-mail. Please consider the environment before printing 
> this e-mail.
>  
> 
> From: Marika Konings <marika.konings@xxxxxxxxx>
> Date: Wednesday, May 30, 2012 4:33 AM
> To: Marika Konings <marika.konings@xxxxxxxxx>, IRTPC Working Group 
> <gnso-irtpc@xxxxxxxxx>
> Subject: Re: [gnso-irtpc] For your review - updated recommendations Charter 
> Question A and B
> 
> Dear All,
> 
> All these documents, including an updated version of the recommendation for 
> Charter Question C, as discussed on the mailing list yesterday, have now also 
> been posted on the wiki: 
> https://community.icann.org/display/gnsoirtppdpwg/For+review. Please share 
> your edits / comments with the mailing list as soon as possible. I'm planning 
> to integrate the recommendations into the Initial Report tomorrow (Thursday) 
> so that you'll have a complete version for review.
> 
> With best regards,
> 
> Marika
> 
> From: Marika Konings <marika.konings@xxxxxxxxx>
> To: IRTPC Working Group <gnso-irtpc@xxxxxxxxx>
> Subject: [gnso-irtpc] For your review - updated recommendations Charter 
> Question A and B
> 
> Dear All,
> 
> Please find attached for your review an updated version of the proposed 
> recommendations for Charter Questions A and B. These updated versions include 
> the comments and edits discussed on today's call as well as the changes 
> proposed by Mikey (I did make a couple of minor edits to Mikey's language for 
> readability purposes). To facilitate review, I've accepted all the changes 
> from the previous version so that only the most recent changes are marked. 
> Please use these versions for further review / comments on the mailing list.
> 
> Following further comments on the proposed changes for the recommendation for 
> Charter Question C, I hope to circulate an updated version of the language 
> for that recommendation as well.
> 
> You are encouraged to share your comments / edits / suggestions as soon as 
> possible as we are still aiming to finalize the Initial Report by coming 
> Friday, 1 June.
> 
> Thanks,
> 
> Marika
> <IRTP-C Recommendation Charter Question B - Updated 29 May 2012 - Mtn 
> Edits.doc>

- - - - - - - - -
phone   651-647-6109  
fax             866-280-2356  
web     http://www.haven2.com
handle  OConnorStP (ID for public places like Twitter, Facebook, Google, etc.)