Re: Registry lock - two-factor or intervention
Patrick Mevzek <[email protected]> Fri, 13 Sep 2013 15:04:40 +0200
| Newsgroups | gmane.ietf.provreg |
|---|---|
| Organization | Dot And Co |
| Message-ID | <[email protected]> |
Jay Daley <[email protected]> 2013-09-13 01:38 > 1. Two-factor authentication of change requests, where the registrant is expected to hold one factor and the registrar pass it through. Using something like SecureID. > > 2. Intervention, where the registry is expected to verify a change request out-of-band (or the registrar pre-empts this with a out-of-band unlock request). > > My questions are: > > Q1: Does anyone have an EPP extension for handling 1 above that they would be willing to put forward for wider use? FWIW I've implemented a VeriSign "Two Factor Auth" extension that unfortunately I do not find now anymore on http://www.verisigninc.com/en_US/products-and-services/domain-name-services/registry-products/epp-sdk/index.xhtml so you have the source instead: https://metacpan.org/source/PMEVZEK/Net-DRI-0.96_05/lib/Net/DRI/Protocol/EPP/Extensions/VeriSign/TwoFactorAuth.pm It covers two-factor auth, but maybe more for registrar two-factor auth instead of registrant two-factor auth. This seems however to be covered by a patent: http://www.faqs.org/patents/app/20120174198 HTH, -- Patrick Mevzek _______________________________________________ provreg mailing list [email protected] https://www.ietf.org/mailman/listinfo/provreg