<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">hi all,<br><br>here’s a first-try at the revision:<br><br><blockquote style="margin: 0 0 0 40px; border: none; padding: 0px;">3.4 The 60-day transfer lock will be required if an Account Holder updates their email address, thus effectively causing a Change of Registrant and simultaneously rendering impossible the exchange of the Change of Registrant Credential as described in section 3.2. If the Account Holder wishes to opt out of the lock, they can validate the change of address through other verifiable means.<br></blockquote><br>On Dec 11, 2014, at 7:22 PM, Caitlin Tubergen <<a href="mailto:caitlin.tubergen@icann.org">caitlin.tubergen@icann.org</a>> wrote:<br><br><blockquote type="cite">Please find the draft COR policy attached and accept my apologies for a double email.<br><br>Kind regards,<br><br>Caitlin <br><br>From: Caitlin Tubergen <<a href="mailto:caitlin.tubergen@icann.org">caitlin.tubergen@icann.org</a>><br>Date: Thursday, December 11, 2014 at 5:00 PM<br>To: "gnso-impl-irtpc-rt@icann.org" <gnso-impl-irtpc-rt@icann.org><br>Subject: Outstanding Issue from today's IRT Call (email/account holder)<br><br>Hi, All,<br><br>Thank you to everyone who attended the call; it was a very robust discussion.<br><br>For those who were unable to attend, I have attached instructions on how to listen to the recording. <br><br>At the start of the call, I presented a scenario whereby a Prior Registrant would be unable to ACK/affirm a Change of Registrant request (COR) request because their email account no longer exists. (Perhaps they left their company, university, etc.) Similarly, if someone were to move and suddenly have a new address, telephone, email address, ISP provider, it would be impossible to ACK a COR via email, postal mail, phone, etc. While this is narrow use case, ICANN staff and the IRT are trying to ensure that we are not creating an unworkable scenario where a Prior Registrant cannot update his or her email address. <br><br>Section 3.4 of the draft COR Policy would allow a registrant to log into their account and update their information via their verified account. This gets around the non-existent email address issue, but some have expressed concerns about the risk of hijacking since resellers, hosting providers, et. al., may be an account holder. <br><br>ICANN staff is currently seeking solutions to the problem mentioned above. Specifically, we are looking for alternative authentication methods besides the exchange of pin. <br><br>A couple of suggestions mentioned on the call include:<br><span class="Apple-tab-span" style="white-space:pre"> </span>• FOAs for change of registrant. (The Prior Registrant would receive an informative FOA at its email address (listed in Whois) and if it doesn’t contact the registrar within a certain number of days, the email change would go through.)<br><span class="Apple-tab-span" style="white-space:pre"> </span>• Alternative authentication depending on the type of registrant change, i.e., a different authentication method could be used if the name is staying in the same account rather than a “push” between accounts<br>Please feel free to elaborate on the above or provide new suggestions entirely. We discussed the difficulty with the resolution of this particular problem and how this may need to back to the GNSO for more guidance if it cannot be resolved within the IRT, particularly since the IRT is not a representative body of the ICANN community.<br><br>Please provide any suggestions to me by COB Thursday, 18 December. Thank you in advance for your feedback. <br><br>Kind regards,<br><br>Caitlin <br><span><Draft Change of Registrant Policy_11Dec.docx></span><br></blockquote><br><div><br>PHONE: 651-647-6109, FAX: 866-280-2356, WEB: <a href="http://www.haven2.com">www.haven2.com</a>, HANDLE: OConnorStP (ID for Twitter, Facebook, LinkedIn, etc.)<br></div><br></body></html>