<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:38288162;
mso-list-template-ids:288404264;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:208155445;
mso-list-type:hybrid;
mso-list-template-ids:-479673488 1636228632 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2
{mso-list-id:271285947;
mso-list-type:hybrid;
mso-list-template-ids:702057032 1636228632 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l3
{mso-list-id:576943936;
mso-list-type:hybrid;
mso-list-template-ids:1557969720 1636228632 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l4
{mso-list-id:654994268;
mso-list-template-ids:320962;}
@list l4:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l4:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5
{mso-list-id:966400866;
mso-list-template-ids:1526082494;}
@list l5:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l6
{mso-list-id:1143111065;
mso-list-type:hybrid;
mso-list-template-ids:1048496738 1636228632 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l6:level1
{mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l6:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l7
{mso-list-id:1293289472;
mso-list-type:hybrid;
mso-list-template-ids:-1040126832 1636228632 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l7:level1
{mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l7:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l7:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l7:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l7:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l7:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l7:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l7:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l7:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l8
{mso-list-id:1715544934;
mso-list-template-ids:2123507400;}
@list l8:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9
{mso-list-id:1835678680;
mso-list-template-ids:904717718;}
@list l9:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l10
{mso-list-id:2094348841;
mso-list-type:hybrid;
mso-list-template-ids:-450705878 1636228632 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l10:level1
{mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l10:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l10:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l10:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l10:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l10:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l10:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l10:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l10:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Dear TPR Working Group,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Please find below the notes and action items from today’s TPR meeting on Tuesday, 10 August 2021 at 16:00 UTC.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">The next meeting will be <b>Tuesday, 17 August at 16:00 UTC</b>.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Best regards,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Emily, Caitlin, Berry, and Julie</p>
<p class="MsoNormal">--</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><b><u>Action Items</u></b></p>
<p class="MsoNormal"><b> <o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>ACTION ITEM: WG members to review/comment on the</b>
<a href="https://docs.google.com/document/d/1wCUMe9ii6g05kUZ558IuUvJaS6K2t0GZJYvlfOy-raY/edit?usp=sharing">
Losing FOA Working Document</a><b> in preparation for the meeting on Tuesday, 17 August.</b>
</p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>Also see the <a href="https://urldefense.com/v3/__https:/docs.google.com/spreadsheets/d/1FunWaz3gNZl8mPi5pNKti2GsfPC_9_DTt8uRQq4Oe5Q/edit*gid=0__;Iw!!PtGJab4!o0PW6FDz4oeI2yWVlZ-6QHbGvS2VxPn0_8R_qDAqddh-FQQAkEyzlaJpFqJ4qFoQCoEgYPbHTg$">project
workplan [docs.google.com]</a> for action items.<o:p></o:p></b></p>
<p class="MsoNormal"><b><u><o:p><span style="text-decoration:none"> </span></o:p></u></b></p>
<p class="MsoNormal"><b><u>Notes:<o:p></o:p></u></b></p>
<p class="MsoNormal"><b><u><o:p><span style="text-decoration:none"> </span></o:p></u></b></p>
<p class="MsoNormal"><b><span style="color:black">Transfer Policy Review Phase 1 - Meeting #</span>12 – Tuesday, 03 August at 16:00 UTC</b></p>
<p class="MsoNormal"><b><span style="color:black">Proposed Agenda</span></b></p>
<p class="MsoNormal"><span style="color:black"> </span></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">1. Roll Call & SOI Updates (5 minutes)</p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">2. Welcome & Chair updates (5 minutes)</p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l1 level1 lfo8">
<span style="font-size:11.0pt">Staff sent out the updated Project Plan last week. Let us know if you have any questions or comments on it.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l1 level1 lfo8">
<span style="font-size:11.0pt">Calendar invites have been sent for meetings through October 2021.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">3. Continued discussion of AuthInfo Codes (15 minutes): Focus relevant SO/AC/SG/C written input: See --
<a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/1O9PAnxWFUuPofLQCWIQXz8lT7KEj1HgH3b_obh0AK00/edit?usp=sharing*20*5bdocs.google.com*5d.__;JSUl!!PtGJab4!rq567ZEBJZwbOnq1JHFQSZILpvKYqoOCIYvZadgfIApveQQfyP-6fJ-Ibg1ELrHqMChlFnm-nQ$" title="https://urldefense.com/v3/__https://docs.google.com/document/d/1O9PAnxWFUuPofLQCWIQXz8lT7KEj1HgH3b_obh0AK00/edit?usp=sharing*20*5bdocs.google.com*5d.__;JSUl!!PtGJab4!rq567ZEBJZwbOnq1JHFQSZILpvKYqoOCIYvZadgfIApveQQfyP-6fJ-Ibg1ELrHqMChlFnm-nQ$">
AuthInfo Codes working document [docs.google.com]</a> and <a href="https://community.icann.org/display/TPRPDP/Community+Input">
Early Input</a>:</p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l0 level1 lfo3">
<span style="font-size:11.0pt">One piece to comment on is that there is a new standard out raised by a security organization on using dictionary words. That you could use three different dictionary words in a string and it would be just as secure. See: Link
on password strength (related to Auth-Info) I mentioned in call <a href="https://www.ncsc.gov.uk/blog-post/the-logic-behind-three-random-words">
https://www.ncsc.gov.uk/blog-post/the-logic-behind-three-random-words</a>. <o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l0 level1 lfo3">
<span style="font-size:11.0pt">Didn’t see anything new that the WG hasn’t already discussed.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l0 level1 lfo3">
<span style="font-size:11.0pt">Mark this AuthInfo discussion as complete for now.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">4. Discussion of Losing FOA (60 minutes): See –
<a href="https://docs.google.com/document/d/1wCUMe9ii6g05kUZ558IuUvJaS6K2t0GZJYvlfOy-raY/edit?usp=sharing">
Losing FOA Working Document</a>:</p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Charter Questions</u>:</p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="border:solid black 1.0pt;background:#BDD7EE;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">a7) Is the Losing FOA still required? If yes, are any updates necessary?<o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><i><span style="color:white">Note: In answering this question, the Staff Support Team has included feedback from the Registrar/Registrant Survey that was issued as part of the Transfer Policy
Policy Status Report. Additionally, the Support Staff Team has included a non-exhaustive list</span> of sub-questions for the WG to consider. </i><br>
<b><i>Early Written Input received from the BC on this charter question: </i></b><i>Although apparently not necessary from a practical perspective, the Losing FOA may have some utility as a means of evidencing a transfer.</i><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Discussion</u>:</p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">Seems to be working without the losing FOA since GDPR. .NL we don’t use FOAs at all.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">If it’s not broken, just leave it as it is and let the registrars make that decision.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">Delays transfer for up to 5 days, so nice that it could be optional – particularly if we could do it faster. Would like to leave it optional if the registrar thinks it’s necessary for its registrant.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">Reminder that there is a gaining FOA that a gaining registrar used to send to confirm their desire to transfer; the losing FOA was a form of acknowledgement of intent to transfer. The current transfer mechanism identifies those
two steps. </span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">The losing FOA is required today but a change we make could be to make it optional.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">The thing to avoid here if we eliminated it or made it option if there was no form of awareness to stop a legitimate transfer. Should eliminate that there is some notice and means to decline in order to avoid having a registrant’s
name transferred away under non-normal circumstances.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">A fourth option: we could think about how to make it better – to require that it is as easy to accept the transfer as to deny it.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">Think about the losing FOA to acknowledge that there is an intent to transfer. Think about the purpose of the losing FOA: you can meet the needs with the AuthInfo code, for example. Question is: what are we looking to achieve
here? The purpose of the losing FOA.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">Where the FOA is the second factor of protection, the losing FOA email in many cases serves as a means for the registrant to know the transfer occurred (or may occur) vs a silently vanishing name.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">If you drill down you will find registrars using it for right and wrong reasons, so that argues for making it optional. For example, could be easier to explain for Dutch registrants as it would be similar to what we are doing
now.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">If the losing FOA is eliminated, then make sure that the registrars could have 5 days to determine if this is a fraudulent request or not.
</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l6 level1 lfo9">
<span style="font-size:11.0pt">Also, if the losing FOA is eliminated would like some way to get the domain name back if the registrar notifies that it is transferred erroneously.</span><o:p></o:p></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">---</p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">Additional questions for consideration (from the working document):<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l4 level1 lfo10">
Should the five-day grace period remain or should the timeframe be reconsidered?<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l4 level1 lfo10">
Is the current text of the Losing FOA sufficient or does it require updating?<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l4 level1 lfo10">
Similar to the Gaining FOA, should the Losing FOA require express authorization/confirmation of the transfer?<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l4 level1 lfo10">
Some registrar survey respondents have noted that the Losing FOA provides a useful paper trail - is this important to retain, or is there an alternative way to achieve this? <o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l4 level1 lfo10">
Is there another security mechanism that should be included with the Losing FOA in the event the registrant’s email address is hacked?</li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">----<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">The 5 days in the current process – how long do you go before finding out that the name has been transferred if the losing FOA goes away?</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">ICANN Org Compliance: The investigation of the transfer complaint – the main burden for evidence is on the losing registrar at that FOA (since the gaining FOA is not being used).</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">We do have a discussion later around the dispute mechanism/process.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">More questions: What problem are we trying to solve? What has failed when it is necessary for a transfer to be recalled? Is it that the transfer itself was bad? Or did the transfer process work as it was supposed to but there
is an external reason to recall the transfer? That factors into how easy or hard the transfer has to be or what the recovery process will be.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Don’t think there is a failure in the transfer process, but is an external failure.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">When a domain hasn’t been properly transferred, it’s because an account was compromised, but not a failure of the transfer process, so we may not find a solution in the transfer policy.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">There is no process that is so secure that it can never be bypassed.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">To take that a step further, if the registrant has lost control of their email, as well as their registrar account, does the Losing FOA help at all?<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">We do need a process for recovery, so in that way there should be a way to internalize it. The question is whether the transfer process has to protect against email compromise or registrant account compromise.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">There are numerous cases where we can’t protect everyone – so maybe the transfer process isn’t the place to find a solution.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Going back to the original question – this seems to be a second factor of protection, so we need to decide whether it is the best/right second factor of protection.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">+1 on better recourse for 'clawback' under bad-act situations, however, there is also a need to have some finality to legitimate transfers. There are ways that bad-folk could abuse the clawback process (ex bad outcome scenario:
1] legitimate domain sale to third party, 2] money exchanges, 3] name transfers, 4] clawback + keep money).<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">It sounds like it’s a necessary thing, if not exactly what we have today. Maybe that doesn’t mean that the transfer process gets more secure, but maybe we change the dispute procedure.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">How often is a “clawback” required? Does this require additional security measures, or would the dispute procedures solve that?<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Security and the need for secure is a holistic type of problem. We want transfers to be secure, but that doesn’t mean that the transfer process has to solve every problem. If a registrant’s account at a registrar there is nothing
we can do about that, unless you have other types of security controls, such as second factor authentication.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Even if the transfer process works the way it should be, there still could be other security failures.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">The SSAC’s input references SAC007, SAC040, SAC044, and SAC074. You can find these four reports here:
<a href="https://www.icann.org/groups/ssac/documents">https://www.icann.org/groups/ssac/documents</a>.
<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">The registrar account: the account holder with the registrar may not be the registrant – it could be an entity doing something on behalf of the registrant. In this context: if there is an authorization to allow a registration
to transfer, it might be coming from a third party, or from the registrant, but either way the registrant has to be notified quickly and reliably.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Looking through the additional questions it looks like we have hit on most of these.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Need to continue to discuss whether the policy should be changed to make the losing FOA and whether that might make compliance harder/slower. People are still looking at keeping a 5-day window, but not necessarily as part of
the losing FOA, but perhaps part of the TAC.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Or, are there any requirements we would make in additional to the current ones?<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">In terms of gauging people’s reactions on whether the losing FOA should be optional: seems that we could put the emphasis on an improved dispute mechanism that addresses thefts.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Could look at the transfer dispute mechanism to see if we can improve that process.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Note that the TDRP (transfer dispute mechanism process) was hardly used. In general, the procedure itself is between the gaining and losing registrars. Only used when the registrant has exhausted all other options to recover
the domain. We’ll take a closer look at it in phase 2. The WG can look at it in phase 1 and suggest some pointers for phase 2.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">In terms of changing the existing requirement of the losing FOA: The losing and gaining FOA are requirements. There is a moratorium on the gaining FOA, but the losing FOA is a requirement so it will take consensus to change
it.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">The paper trail is an important factors – helpful for the registrars to give examples of logging of transfers that could be used for investigating fraudulent transfers.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l10 level1 lfo11">
<span style="font-size:11.0pt">Today it’s the losing registrar’s responsibility to prove everything. Is that responsibility in the correct spot, or should the gaining registrar have any responsibility?<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="border:solid black 1.0pt;background:#BDD7EE;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><span style="color:black">a8) Does the CPH Proposed Tech Ops Process represent a logical starting point for the future working group or policy body to start with? If so, does it provide sufficient security for registered name holders? If
not, what updates should be considered?</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><i><span style="color:black">Note: As a starting point, the CPH Tech Ops Group “agreed that the requirement to notify the Registrant about a transfer request should be mandatory. As general business practices of Registrars and individual
transfer scenarios vary, the group concluded that such notification does not have to be an email, but rather may incorporate other means of more modern communication.”<o:p></o:p></span></i></p>
<p class="MsoNormal"><b><i>Early Written Input received from the BC on this charter question:
</i></b><i>Good starting point.</i><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l7 level1 lfo12"><span style="font-size:11.0pt">What are you trying to achieve by notifying the registrant? If you get the AuthInfo Code that is a form of notification. What does this notification
add to the process?</span><o:p></o:p></li></ul>
<p class="MsoNormal"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l7 level1 lfo12"><span style="font-size:11.0pt">It is possible to obtain the AuthInfo Code other than with an email request, so the notification is another way for the registrant to be aware. The
objective is to ensure that a domain doesn’t just silently vanish.</span><o:p></o:p></li></ul>
<p class="MsoListParagraph"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l7 level1 lfo12"><span style="font-size:11.0pt">Note that Tech Ops concluded that the notification doesn’t have to be in an email.</span><o:p></o:p></li></ul>
<p class="MsoListParagraph"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l7 level1 lfo12"><span style="font-size:11.0pt">Notification to registrant by gaining registrar (if different than the gaining registrant) was severely complicated by the GDPR _stuff_.<o:p></o:p></span></li></ul>
<p class="MsoListParagraph"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l7 level1 lfo12"><span style="font-size:11.0pt">The question asked “does it provide sufficient security for registered name holders”. Nothing wrong with the additional level of notification, but
from a risk management point of view, what are we really getting here? The losing registrar has to send it and if the losing registrar is behaving badly what is the point of having this requirement, or in cases where the registrar’s account is compromised.<o:p></o:p></span></li></ul>
<p class="MsoListParagraph"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l7 level1 lfo12"><span style="font-size:11.0pt">Notification can be affected differently by thick or thin registries. Our suggestions/recommendations should be agnostic (not assuming) one or another.<o:p></o:p></span></li></ul>
<p class="MsoListParagraph"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l7 level1 lfo12"><span style="font-size:11.0pt">What are we trying to solve here? The notification brings little to the table.<o:p></o:p></span></li></ul>
<p class="MsoListParagraph"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr style="height:.6in">
<td valign="top" style="border:solid black 1.0pt;background:#BDD7EE;padding:0in 5.4pt 0in 5.4pt;height:.6in">
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">a9) Are there additional inter-registrar transfer process proposals that should be considered in lieu of or in addition to the CPH TechOps Proposal? For example, should affirmative consent to the
Losing FOA be considered as a measure of additional protection?</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><b><i><span style="color:black">Early Written Input received from the BC on this charter question: Transfer locks should be removable by the registrant</span></i></b><i><span style="font-size:12.0pt;color:black">.</span></i><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l2 level1 lfo13">
<span style="font-size:11.0pt">As mentioned, where thin registry is in place, the registrant (and contact info) are known to registry… at thick registries but not at thin.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l2 level1 lfo13">
<span style="font-size:11.0pt">On the BC comment – the opportunity to opt out should be made more clear to registrants, registries, etc.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l2 level1 lfo13">
<span style="font-size:11.0pt">It is the registrant who had to remove a transfer lock, not the registry.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l2 level1 lfo13">
<span style="font-size:11.0pt">Question: Do we need to specify what is a transfer lock? Answer: We need to be specific. Which transfer lock we are mentioning.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">5. AOB (5 minutes)</p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l3 level1 lfo6">
Next meeting: 17 August 2021 @ 16.00 UTC<o:p></o:p></li></ul>
</div>
</body>
</html>