Re: Registry lock - two-factor or intervention

The only reason why I would use an extension to implement a registrar lock, is to:

1) Collect real registrant information so it can be used to authenticate a request to activate at the registry using an out-of-band method. This include response/challenges, mobile number, etc so that multi-factor authentication can be used. This is specially useful when privacy services are used.

2) Signal the registrar that a registry lock is in effect, which could be much more than the standard server* statuses.




On Sep 18, 2013, at 1:21 PM, "Hollenbeck, Scott" <[email protected]> wrote:

> Anyway, yes, if the idea is to communicate some sort of request to the registry to perform an out-of-band locking action it could be done via EPP. As you noted there would need to be an additional out-of-band mechanism in place to validate the request.
> 
> Scott

Francisco Obispo 
email: [email protected]
Phone: +1 650 423 1374 || INOC-DBA *3557* NOC
PGP KeyID = B38DB1BE




_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg