Re: [gnso-rap-dt] Some documentation on "use of stolen credentials"

["Mike O'Connor" <mike@xxxxxxxxxx>]

wow!  this is great work Rod.

thanks,

mikey


On Dec 14, 2009, at 6:06 AM, Rod Rasmussen wrote:

> Hello team!
> 
> Sorry I didn't get this out in time for more thorough reading, but this draft 
> should at least help with organizing the discussion on this topic area, which 
> has ranged around quite a bit.
> 
> I concentrated on getting definitions in-place and exposing many of the 
> abuses that have been seen, as they are disparate and we've had a tendency to 
> concentrate on one or two aspects.  As you can see from this document, I've 
> identified three distinct types of "stolen credentials" plus some different 
> ways they are abused in the domain registration process.  The three distinct 
> types of credentials I have identified are "identity", "access", and 
> "financial".
> 
> I took the liberty of throwing in some analysis of the topics, trying to 
> cover several of the things that have been said the past couple weeks.  I 
> have also put in place-holders for some ideas that may make sense to address 
> the different types of stolen credentials being abused that we can flesh out 
> better after some more discussion.
> 
> DOC and PDF formats attached.
> 
> Best Regards,
> 
> Rod
> 
> 
> <RAP WG - Use of Stolen Credentials.pdf><RAP WG - Use of Stolen 
> Credentials.doc>
> 
> 

- - - - - - - - -
phone   651-647-6109  
fax             866-280-2356  
web     www.haven2.com
handle  OConnorStP (ID for public places like Twitter, Facebook, Google, etc.)