<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Both emails came through ..
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">--<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Mr Michele Neylon<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Blacknight Solutions<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Hosting & Colocation, Domains<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">http://www.blacknight.host/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a href="http://blog.blacknight.com/"><span style="color:#0563C1">http://blog.blacknight.com/</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a href="http://www.blacknight.press/"><span style="color:#0563C1">http://www.blacknight.press/</span></a>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a href="http://www.technology.ie/"><span style="color:#0563C1">http://www.technology.ie/</span></a>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Intl. +353 (0) 59 9183072<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Direct Dial: +353 (0)59 9183090<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Social: http://mneylon.social<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Road,Graiguecullen,Carlow,Ireland Company No.: 370845<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> owner-gnso-impl-irtpc-rt@icann.org [mailto:owner-gnso-impl-irtpc-rt@icann.org]
<b>On Behalf Of </b>Mike O'Connor<br>
<b>Sent:</b> Saturday, December 20, 2014 8:55 AM<br>
<b>To:</b> gnso-impl-irtpc-rt@icann.org<br>
<b>Subject:</b> Fwd: [gnso-impl-irtpc-rt] Outstanding Issue from today's IRT Call (email/account holder)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">i’m having a sinking feeling that i’m not subscribed to the list, so this is just a repeat of the note i sent a minute ago. pls ignore…<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">m<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Begin forwarded message:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica",sans-serif">From: </span>
</b><span style="font-family:"Helvetica",sans-serif">Mike O'Connor <<a href="mailto:mike@haven2.com">mike@haven2.com</a>></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica",sans-serif">Subject: Re: [gnso-impl-irtpc-rt] Outstanding Issue from today's IRT Call (email/account holder)</span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica",sans-serif">Date: </span>
</b><span style="font-family:"Helvetica",sans-serif">December 20, 2014 at 7:41:35 AM CST</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica",sans-serif">To: </span>
</b><span style="font-family:"Helvetica",sans-serif">Mike O'Connor <<a href="mailto:mike@haven2.com">mike@haven2.com</a>></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica",sans-serif">Cc: </span>
</b><span style="font-family:"Helvetica",sans-serif">"<a href="mailto:gnso-impl-irtpc-rt@icann.org">gnso-impl-irtpc-rt@icann.org</a>" <<a href="mailto:gnso-impl-irtpc-rt@icann.org">gnso-impl-irtpc-rt@icann.org</a>>, Caitlin Tubergen <<a href="mailto:caitlin.tubergen@icann.org">caitlin.tubergen@icann.org</a>></span><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">i finally circled back to this and realized that i wrote language that is almost as flawed as the original.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">basically, this is a use case and i’m not sure actual policy language is required — since we didn’t specify how the exchange of credentials was accomplished. since this customer is doing both sides of the transaction within the same registrar,
it seems to me that the “independently verifiable” angle kicks in. here is what i propose <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<div>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoNormal">3.4 In the case where an Account Holder wishes to update an email address they can no longer access and thus cause a Change of Registrant, the exchange of the Change of Registrant Credential as described in section 3.2 must be transacted
and validated through other verifiable means.<o:p></o:p></p>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoNormal"><o:p> </o:p></p>
</blockquote>
</div>
</div>
</div>
<div>
<div>
<div>
<p class="MsoNormal">change of registrant does NOT include change of registrar (that’s the whole underlying point of splitting these processes apart) — so their registrar can develop whatever processes that are needed to facilitate the exchange of credentials.
clearly email as the medium of exchange won’t work in this use case, something else will be needed instead. but registrars already have processes that they use to verify people’s identity when email isn’t available (Simonetta rattled a few off on the call
but i’ve forgotten what they were). isn’t that all that’s required?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">On Dec 12, 2014, at 9:33 AM, Mike O'Connor <<a href="mailto:mike@haven2.com">mike@haven2.com</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">oops - i forgot to attach the revised draft too.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal"><Draft Change of Registrant Policy_11Dec-MO1.docx><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Dec 12, 2014, at 9:26 AM, Mike O'Connor <<a href="mailto:mike@haven2.com">mike@haven2.com</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">hi all,<br>
<br>
here’s a first-try at the revision:<o:p></o:p></p>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoNormal">3.4 The 60-day transfer lock will be required if an Account Holder updates their email address, thus effectively causing a Change of Registrant and simultaneously rendering impossible the exchange of the Change of Registrant Credential
as described in section 3.2. If the Account Holder wishes to opt out of the lock, they can validate the change of address through other verifiable means.<o:p></o:p></p>
</blockquote>
<p class="MsoNormal"><br>
On Dec 11, 2014, at 7:22 PM, Caitlin Tubergen <<a href="mailto:caitlin.tubergen@icann.org">caitlin.tubergen@icann.org</a>> wrote:<br>
<br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Please find the draft COR policy attached and accept my apologies for a double email.<br>
<br>
Kind regards,<br>
<br>
Caitlin <br>
<br>
From: Caitlin Tubergen <<a href="mailto:caitlin.tubergen@icann.org">caitlin.tubergen@icann.org</a>><br>
Date: Thursday, December 11, 2014 at 5:00 PM<br>
To: "<a href="mailto:gnso-impl-irtpc-rt@icann.org">gnso-impl-irtpc-rt@icann.org</a>" <<a href="mailto:gnso-impl-irtpc-rt@icann.org">gnso-impl-irtpc-rt@icann.org</a>><br>
Subject: Outstanding Issue from today's IRT Call (email/account holder)<br>
<br>
Hi, All,<br>
<br>
Thank you to everyone who attended the call; it was a very robust discussion.<br>
<br>
For those who were unable to attend, I have attached instructions on how to listen to the recording. <br>
<br>
At the start of the call, I presented a scenario whereby a Prior Registrant would be unable to ACK/affirm a Change of Registrant request (COR) request because their email account no longer exists. (Perhaps they left their company, university, etc.) Similarly,
if someone were to move and suddenly have a new address, telephone, email address, ISP provider, it would be impossible to ACK a COR via email, postal mail, phone, etc. While this is narrow use case, ICANN staff and the IRT are trying to ensure that we are
not creating an unworkable scenario where a Prior Registrant cannot update his or her email address. <br>
<br>
Section 3.4 of the draft COR Policy would allow a registrant to log into their account and update their information via their verified account. This gets around the non-existent email address issue, but some have expressed concerns about the risk of hijacking
since resellers, hosting providers, et. al., may be an account holder. <br>
<br>
ICANN staff is currently seeking solutions to the problem mentioned above. Specifically, we are looking for alternative authentication methods besides the exchange of pin. <br>
<br>
A couple of suggestions mentioned on the call include:<br>
<span class="apple-tab-span"> </span>• FOAs for change of registrant. (The Prior Registrant would receive an informative FOA at its email address (listed in Whois) and if it doesn’t contact the registrar within a certain number of days, the email
change would go through.)<br>
<span class="apple-tab-span"> </span>• Alternative authentication depending on the type of registrant change, i.e., a different authentication method could be used if the name is staying in the same account rather than a “push” between accounts<br>
Please feel free to elaborate on the above or provide new suggestions entirely. We discussed the difficulty with the resolution of this particular problem and how this may need to back to the GNSO for more guidance if it cannot be resolved within the IRT,
particularly since the IRT is not a representative body of the ICANN community.<br>
<br>
Please provide any suggestions to me by COB Thursday, 18 December. Thank you in advance for your feedback. <br>
<br>
Kind regards,<br>
<br>
Caitlin <br>
<Draft Change of Registrant Policy_11Dec.docx><o:p></o:p></p>
</blockquote>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
PHONE: 651-647-6109, FAX: 866-280-2356, WEB: <a href="http://www.haven2.com/">www.haven2.com</a>, HANDLE: OConnorStP (ID for Twitter, Facebook, LinkedIn, etc.)<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
<span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">PHONE: 651-647-6109, FAX: 866-280-2356, WEB:
<a href="http://www.haven2.com/">www.haven2.com</a>, HANDLE: OConnorStP (ID for Twitter, Facebook, LinkedIn, etc.)</span>
<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
<span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">PHONE: 651-647-6109, FAX: 866-280-2356, WEB:
<a href="http://www.haven2.com/">www.haven2.com</a>, HANDLE: OConnorStP (ID for Twitter, Facebook, LinkedIn, etc.)</span>
<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
<span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">PHONE: 651-647-6109, FAX: 866-280-2356, WEB:
<a href="http://www.haven2.com">www.haven2.com</a>, HANDLE: OConnorStP (ID for Twitter, Facebook, LinkedIn, etc.)</span>
<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>