Re: Registry lock - two-factor or intervention

Hi Jay,

This is timely, we're also looking at doing registry lock.  We're looking at different mechanisms to setup the lock and also to procure the lock (the $$$) possibly via EPP, but it should be a generic interface usable for any additional value add services that we might offer in the future, not just hard coded for registry lock. {I think}

We would be interested in working with you to build something.

Also, this in an introduction of Stu, our development manager here at CIRA.

Should we have an industry standard way of doing registry lock? { registrant <--> registrar <--> registry }

Jack

> -----Original Message-----
> From: [email protected] [mailto:[email protected]] On Behalf
> Of Jay Daley
> Sent: September-12-13 7:37 PM
> To: [email protected]
> Subject: [provreg] Registry lock - two-factor or intervention
> 
> I have some questions for you.
> 
> I'm aware of two separate approaches to registry locking
> 
> 1.  Two-factor authentication of change requests, where the registrant is
> expected to hold one factor and the registrar pass it through.  Using something
> like SecureID.
> 
> 2.  Intervention, where the registry is expected to verify a change request out-
> of-band (or the registrar pre-empts this with a out-of-band unlock request).
> 
> My questions are:
> 
> Q1:  Does anyone have an EPP extension for handling 1 above that they would
> be willing to put forward for wider use?

No

> Q2:  Is there any role for EPP in 2 above?

Yes, for locking the domain and also the financial aspect.

> 
> thanks in advance for anyone taking the time to reply!
> 
> cheers
> Jay
> 
> --
> Jay Daley
> Chief Executive
> .nz Registry Services (New Zealand Domain Name Registry Limited)
> desk: +64 4 931 6977
> mobile: +64 21 678840
> linkedin: www.linkedin.com/in/jaydaley
> 
> _______________________________________________
> provreg mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/provreg
_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg