Re: Registry lock - two-factor or intervention

On 21/09/2013, at 1:52 AM, Patrik Fältström <[email protected]> wrote:

>> If this is still the business justification (protection against a compromised Registrar), then there is a problem with facilitating turning on the Registry Lock via the EPP server.
> 
> Well, I see that as a potential denial of service attack. But my only point was that we should see the "Turn ON", "Turn OFF", "Make changes" as separate operations as they MIGHT require different mechanisms.


There's quite a big risk here that a hacker compromises a registrar, switches a domain name to a compromised site and then locks the record, which makes undoing the malicious change much harder when the registrar regains control of their systems.

Jay

-- 
Jay Daley
Chief Executive
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 931 6977
mobile: +64 21 678840
linkedin: www.linkedin.com/in/jaydaley

_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg