[GNSO-TPR] Input Due 30 November: Draft Revisions to Recommendations 2-9

Owen Smigelski owen.smigelski at namecheap.com
Tue Nov 22 19:56:18 UTC 2022


I also like Sarah’s proposed approach. Balances out the concerns raised by the public comments with the WG’s desire to eliminate the losing FOA. 

> On Nov 22, 2022, at 11:06, Catherine Merdinger <catherine at identity.digital> wrote:
> 
> CAUTION: This email originated from outside the organization. Do not click links unless you can confirm the sender and know the content is safe.
> Sarah,
> 
> Thank you for this succinct description of the proposed process for a TAC ACK. 
> 
> This proposal seems like an improvement on our currently-proposed process, which would first notify the RNH only after the TAC had been provided.  As we've discussed, if a baddie requested the TAC and it was provided, a notification to the RNH after that happens means the domain name is almost certainly already gone.  While we have the possibility of the fast undo, it makes more sense to me that we would notify the RNH before TAC was provided (or even set at the registry).  
> 
> One thing to confirm - once the transfer is completed (Step 4), the losing registrar still sends the notice of transfer completion, correct?
> 
> Thanks,
> Catherine
> Catherine Merdinger | Corporate Counsel | Identity Digital Inc. | +1.319.541.9416 | she/her
> 
> 
> 
> On Tue, Nov 22, 2022 at 11:03 AM Theo Geurts <transferpdp at dcx.nl <mailto:transferpdp at dcx.nl>> wrote:
>> Sarah, 
>> 
>> This looks like a good process and leaves enough room when it comes to TAC delivery without disrupting business models. 
>> 
>> If the registrant nacks the tac and other things happen, those should be optional as an account password reset are not possible on an operational level for some business models and I can imagine there are some retail registrars that rather not lock accounts after a nack, at least I suspect that is what the password reset is for. 
>> 
>> Thanks, 
>> Theo 
>> 
>> 
>> 
>> On Tue, Nov 22, 2022, at 6:48 PM, Sarah Wyld wrote:
>>> Hello team,
>>>  
>>> 
>>> I’ve reviewed our draft updated recommendations and the strawman for Rec 2 <https://docs.google.com/document/d/1e8iG6FmRD0M5VlMUrmIedPw3burqfxLXQrkubxDJ3oQ/edit>. Left some minor changes in the redline doc <https://docs.google.com/document/d/1d7KwQH6poIxrafFYc5_1e1jQiiCA4WHqdNuRrx2IfWY/edit>. 
>>>  
>>> 
>>> I want to provide more context specifically around the suggestion for an alternative to the Losing FOA, we can call it the “TAC ACK” process. Prior to our public comment review, the WG seemed aligned on the decision to drop the Losing FOA; we must certainly address all the concerns raised in the public comments, and I think we can do that while also maintaining our goal of streamlining the transfer process by further exploring the TAC ACK option.  
>>> 
>>>  
>>> 
>>> What the process would look like: 
>>> RNH unlocks domain and requests TAC from the Registrar of Record (Losing Rr) 
>>> Losing Rr sends a TAC ACK email to the RNH saying “Someone requested a TAC; if this wasn’t you, click <NACKlink>. If it was you, you can either do nothing and we’ll provide you the TAC in 5 days or you can click <ACKlink> and we’ll give you the TAC right now”
>>> If RNH clicks <NACKlink>, the TAC is never set at the Ry, and other things might happen (e.g. account password reset, etc) 
>>> If RNH clicks <ACKlink>, the Losing Rr provisions the TAC at the Ry and issues it to the RNH (Rec 3 Notification of TAC Issuance)
>>> If no response, Losing Rr waits 5 days and then provisions the TAC at the Ry and issues it to the RNH (Rec 3 Notification of TAC Issuance)
>>> When the RNH receives the TAC, they provide it to the gaining Rr and the transfer is completed (Rec 4 “Notification of Transfer Completion” etc)
>>>  
>>> 
>>> Why this is beneficial: 
>>> Registrant agency: the Registrant has the option to cancel the transfer right away, following the same process as with the current Losing FOA (which has the option to NACK, and which auto-ACKs after a 5 day pending period) 
>>> Just-in-time notifications: The TAC ACK process occurs right when the RNH is preparing for the transfer, rather than at some point later on after they’ve initiated it with the gaining Rr and moved on/stopped thinking about it 
>>> Simplicity: Registrants consistently request fewer emails overall and fewer steps specifically in the transfer process, and have requested an ‘instant transfer’ process for years
>>>  
>>> 
>>> Risks & mitigations: 
>>> Risk: There would be no notification/’stop the transfer’ moment after the transfer is initiated with the gaining registrar; Mitigation: (a) there is a notification/stop moment at the time of TAC request, and (b) the fast-undo process we are committed to creating in the next phase of this WG would specifically address these issues and could certainly include reverting DNS if it was changed 
>>> Risk: Level of development effort does not balance benefit; Mitigation: The level of effort will differ for different providers, and we shouldn‘t reject ideas just because they take work, especially since we’re already making changes to the transfer process as a whole. Now is exactly the time to do this! 
>>>  
>>> 
>>> The working group hasn’t reached consensus on eliminating the Losing FOA, but we also haven’t reached consensus on keeping it. I still believe that this “TAC ACK” proposal would address the entirely valid concerns about security and registrant agency, while also providing noticeable improvement for registrants who have repeatedly and for quite some time requested a faster transfer process. I hope we can discuss this proposal alongside the Losing FOA strawman.
>>>  
>>> Thank you,
>>>  
>>> -- 
>>> Sarah Wyld, CIPP/E
>>>  
>>> Policy & Privacy Manager
>>> Pronouns: she/they
>>>  
>>> swyld at tucows.com <mailto:swyld at tucows.com> 
>>>  
>>> 
>>> 
>>> From: Emily Barabas <mailto:emily.barabas at icann.org>
>>> Sent: November 16, 2022 12:18 PM
>>> To: gnso-tpr at icann.org <mailto:gnso-tpr at icann.org>
>>> Subject: [GNSO-TPR] Input Due 30 November: Draft Revisions toRecommendations 2-9
>>> 
>>>  
>>> 
>>> Dear working group members,
>>>  
>>> As discussed on yesterday’s call, staff had an action item to provide a redline revision of the Initial Report reflecting agreed updates to Recommendations 3-9 (see pages 18-24), as well as a strawman draft of the new Recommendation 2 and response to Charter Question A7. The redline is attached. The Recommendation 2 strawman is available here <https://docs.google.com/document/d/1e8iG6FmRD0M5VlMUrmIedPw3burqfxLXQrkubxDJ3oQ/edit>.
>>>  
>>> Please carefully review these documents in coordination with the groups you represent. If you feel that there are items that need to be revised, please enter them here <https://docs.google.com/document/d/1d7KwQH6poIxrafFYc5_1e1jQiiCA4WHqdNuRrx2IfWY/edit>. For each item, please include:
>>>  
>>> Report version (the date listed in the header of the document) and applicable line numbers ( these are listed along the left margin of the document).
>>> Name and group you represent: If multiple WG members represent a group, input should be in coordination with these other members.
>>> Rationale: please provide a clear explanation for why you are proposing the revision.
>>> Specific proposed revision: Provide the language you would like to see added/removed/edited.
>>>  
>>> The deadline for submitting input is 30 November 2022. After the deadline, the working group will discuss the items submitted in the input document. Following review of those items, the text will be considered stable. 
>>>   
>>> Please do not hesitate to reach out with any questions about the review process.
>>>  
>>> Kind regards,
>>>  
>>>  Caitlin, Julie, Berry, and Emily
>>>  
>>>  
>>>  
>>> 
>>>  
>>> 
>>> Emily Barabas
>>> 
>>> Policy Development Support Senior Manager
>>> 
>>> Internet Corporation for Assigned Names and Numbers (ICANN)
>>> 
>>> Phone: +31 (0)6 84507976
>>> 
>>> www.icann.org <http://www.icann.org/>
>>>  
>>> 
>>>  
>>> 
>>>  
>>> 
>>> _______________________________________________
>>> GNSO-TPR mailing list
>>> GNSO-TPR at icann.org <mailto:GNSO-TPR at icann.org>
>>> https://mm.icann.org/mailman/listinfo/gnso-tpr
>> 
>> _______________________________________________
>> GNSO-TPR mailing list
>> GNSO-TPR at icann.org <mailto:GNSO-TPR at icann.org>
>> https://mm.icann.org/mailman/listinfo/gnso-tpr
> ********************
> CAUTION:
> This email originated from outside the organization. Do not click 
> links unless you can confirm the sender and know the content is safe.
> ********************
> 
> 
> _______________________________________________
> GNSO-TPR mailing list
> GNSO-TPR at icann.org
> https://mm.icann.org/mailman/listinfo/gnso-tpr

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mm.icann.org/pipermail/gnso-tpr/attachments/20221122/47f85a8b/attachment-0001.html>


More information about the GNSO-TPR mailing list