RE: [registrars] Reliable InterRegistrar Data Transfer

[Rick Wesson <wessorh@ar.com>]

I agree with rob here. It is my hope that we can design a open and
transparent system where by each registrar knows who and how many domains
were queried by each registrar and that any abuse of the system is clearly
identified and all understand what constitutes abuse.

afterall i don't believe that registrars are directly abusing whois, third
parties may but they won't have access to the proposed system, only
registrars will have access so abuse should be clear and evident when
contrasted against other activity.

There has been enough interest in this topic that I'll create a teleconf
for early next week either monday to wed. I'll post the call details to
registrars individually.

best,

-rick


On Thu, 12 Sep 2002, Rob Hall wrote:

> Bhavin,
>
> Actually, I don't think you want to black list the way you suggest.  It may
> in fact be a registrar doing the proper due dillegence before a transfer.
>
> For example, a lot of registrar, when they receive a transfer request, will
> do a whois, grab the admin contact email address, and email a key to the
> contact that must be clicked on in order for the transfer to continue.  This
> is all done prior to the actual transfer request being put in to the
> Registry.
>
> If a transfer request was fraudulent, it would be caught by the gaining
> registrar, and no transfer would actually be initiated.  However, a whois
> request to you would have been initiated.
>
> I suspect that you don't want to block based on this, as you would be
> blocking registrars who are taking the time to verify transfers prior to
> initiating them at the Registry.
>
> Rob.
>
> -----Original Message-----
> From: owner-registrars@dnso.org [mailto:owner-registrars@dnso.org]On
> Behalf Of Bhavin Turakhia
> Sent: Thursday, September 12, 2002 2:00 PM
> To: Registrars@dnso.org
> Subject: RE: [registrars] Reliable InterRegistrar Data Transfer
>
> A transfer request actually goes to the registry after the whois request
> so there is no direct online verification mechanism. Nevertheless we can
> write a script to monitor any registrar who is sending whois requests
> for domains which then later have no transfer away requests, and
> blacklist those registrars
>
>