Re: Transfering a domain

[davidk@ISI.EDU]

Kent,

> Kent Crispin writes :
> 
> This is very complicated from a policy point of view, simple from a 
> technical point of view.
> 
> The simplest case is where the user contacts the current registrar 
> and asks to be transferred to a new registrar, and the old registrar 
> and the user are on good terms.  In this case
> 
>     1) the user contacts the new registrar and makes sure it is ok to
>     transfer there
> 
>     2) the user contacts the old registrar and requests the transfer
> 
>     3) the old registrar updates any central records to indicate the
>     new registrar is now the owners representative.
> 
>     4) the user finishes the arrangements with the new registrar

This procedure involves 4 steps. It depends on the willingness of the old
registrar. I can tell you from my experience working for an IP registry
that the old registrar is not always willing to cooperate and that there
are often conflicts (there is a reason for the transfer). Any scheme that
doesn't involve the old registrar will be better. This becomes even more
important if the old registrar just doesn't exist anymore.

> The critical issue is how the user authenticates to the registrars. 
> It might be possible to get a public key from the user, but I don't
> know that it could be required.

Note that it is easier to prove that a registrar frauded a public key
then that it is to prove 'unwillingness' of a regitrar.
 
> The next simplest case is when the old registrar just fails.  In that 
> case, if the old registrar gives adequate notice, each user can 
> follow the above procedure to transfer to the new registrar of 
> choice.  If the old registrar fails suddenly, then a central 
> authority must step in.  The CA could either a) arbitrarily assign 
> new registrars for each user, or, b) notify the users that their 
> registrar is out of business, they need to transfer, and that the CA 
> stands in for the failed registrar to effect the transfer.

Any involvement of the CA means extra work, extra legal exposure, extra
costs.

> In the bitter end, the dispute resolution procedure could result in 
> the CA taking some action to effect the transfer.

Of course this might be needed sometimes ...

David K.

PS Thanks for pointing out the possible fraud vulnerability in my idea.
---