Re: [registrars] EPP Informed Consent - Game Set and Match ????

[Larry Erlich <erlich@domainregistry.com>]

Rob Hall wrote:
> 
> Mike,
> 
> I don't believe it is game, set and match.
> 
> How can you ensure that the Registrant that gave out his auth code is aware
> of any transfer ?
> 
> While the authcode may be used to verify the IDENTITY of the Registrant, I
> don't see how it can absolutely be used to verify that the Registrant agrees
> to the specific transfer request.

Correct.

> 
> I don't think Registrants realize what the authcode is really for. I also
> bet most don't treat it like a PIN number or password at all.  I suspect
> that if their hosting company was to ask for it, saying they needed it to
> setup hosting, that most Registrants would give it.
> 
> In fact, I bet as a Registrar, I could ask for it for just about any reason
> and they would give it to me.
> 

Rob I agree with this.  Registrants regularly give out
passwords and are willing to change the admin
contact to the ISP just because the ISP says that
is what needed to host their web site.

Larry Erlich