Re: Registry lock - two-factor or intervention

"Hollenbeck, Scott" <[email protected]> Fri, 13 Sep 2013 11:35:03 +0000
Newsgroups gmane.ietf.provreg
Message-ID <831693C2CDA2E849A7D7A712B24E257F49261C9B@BRN1WNEXMBX01.vcorp.ad.vrsn.com>
> -----Original Message-----
> From: [email protected] [mailto:[email protected]] On
> Behalf Of Jay Daley
> Sent: Thursday, September 12, 2013 7:37 PM
> To: [email protected]
> Subject: [provreg] Registry lock - two-factor or intervention
> 
> I have some questions for you.
> 
> I'm aware of two separate approaches to registry locking
> 
> 1.  Two-factor authentication of change requests, where the registrant
> is expected to hold one factor and the registrar pass it through.
> Using something like SecureID.
> 
> 2.  Intervention, where the registry is expected to verify a change
> request out-of-band (or the registrar pre-empts this with a out-of-band
> unlock request).
> 
> My questions are:
> 
> Q1:  Does anyone have an EPP extension for handling 1 above that they
> would be willing to put forward for wider use?
> Q2:  Is there any role for EPP in 2 above?

I'm not aware of an extension for 1 or an EPP role for 2, Jay.

Scott
_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg