RE: [registrars] EPP Informed Consent

[Bruce Tonkin <Bruce.Tonkin@melbourneit.com.au>]

Hello Rick,

> 
> under origional design the AuthInfo in EPP were to be used as 
> a passowrd,
> a humanly remberable string.

Yes - actually in the Australian .au environment, registrars must offer
registrants with the ability to change the auth-info to a string of their
choice.  Also the auth-info must be provided at the time of registration.

Some registrars generate an initial string for the registrant, and some
allow the registrant to choose the initial string at time of registration.

Also after the string is initialized and provided to registrants at time of
registration, the registrar is not allowed to change the string (this was
seen as anti-competitive).

Regards,
Bruce
>