<div dir="ltr"><span id="gmail-docs-internal-guid-a7ccbab1-7fff-3965-036a-a4e4780eb43d"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">Hi team,</span></p><br><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">I know this is a topic we’ve already discussed but it came up again for us at Tucows recently and I want to share some more thoughts for the group’s consideration before we come back to it in a meeting</span></p><br><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">I think we should keep ‘violation of the registration agreement’ in the reasons why the losing registrar MAY deny a transfer.</span></p><br><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">If we want the DNS space to have the trust and respectability of the Internet community, we must take a ‘responsible registrar’ approach to certain types of domain. Issues outlined in the </span><a href="https://dnsabuseframework.org/" style="text-decoration-line:none"><span style="font-size:11pt;font-family:Arial;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;text-decoration-line:underline;vertical-align:baseline;white-space:pre-wrap">DNS Abuse Framework</span></a><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">, for example, may extend beyond standard DNS Abuse in some cases, but absolutely causes terrible harm to the world that disallowing domain transfer is appropriate. For example, a domain suspended for promoting terrorism, shouldn’t simply be allowed to be transferred to a less-aware registrar and continue promoting terrorism. The </span><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-style:italic;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">extremely minor</span><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap"> speed bump of having to find a new domain </span><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-style:italic;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">and</span><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap"> a new registrar is the literal least we can do.</span></p><br><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">I’m concerned that by removing this option from registrars we lose an important measure to prevent abuse and other online harms. When we discussed this topic in a recent meeting, I had thought that the registrar would address the harm by revoking ownership of the domain name (e.g. by updating the RNH contact info to their own), but upon further discussion both internally and with some other Rr’s I have come to understand that is not common practice nor should it be the expected path. As such, </span><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">there needs to be some method for the Rr to deny the transfer in this type of situation while the original RNH remains listed on the registration record.</span></p><br><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">I know there’s a concern that some registrars might have unreasonable terms, but don't we generally expect that the Rr will set reasonable terms and the RNH will understand those terms prior to accepting them? If we start assuming that the RNH did not understand the terms they accepted, that seems like a dangerous path to go down. </span></p><br><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">Going back to the terrorism example, a registrar that hasn’t signed on to the DNS Abuse Framework isn’t required to suspend a domain for terrorism (unless told to by appropriate LEA, but that’s a different case). But one that has shouldn’t be forced to allow terrorists to continue at another Registrar, they should be able to follow their published policy of suspending the service and denying transfer away. </span></p><br><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;vertical-align:baseline;white-space:pre-wrap">I understand this isn’t simple and there are valid concerns about Registrars setting impossible or inappropriate Terms in order to retain customers by preventing transfer out. I hope that as a team we can find some way to balance all these issues and include violation of the registration agreement in our updated reasons why the Registrar MAY deny the transfer.</span></p></span><div><br></div><div>Thank you,</div><br class="gmail-Apple-interchange-newline"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><p style="font-size:12.8px;margin:0in 0in 0.0001pt;line-height:12.05pt;background-image:initial;background-repeat:initial"><a name="SignatureSanitizer_SafeHtmlFilter_UNIQUE_ID_SafeHtmlFilter_UNIQUE_ID_SafeHtmlFilter_UNIQUE_ID_SafeHtmlFilter_UNIQUE_ID_SafeHtmlFilter_UNIQUE_ID_SafeHtmlFilter_UNIQUE_ID_SafeHtmlFilter_UNIQUE_ID_SafeHtmlFilter__MailAutoSig" style="line-height:12.05pt;font-size:12.8px"><b><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(102,110,118)">Rich Brown</span></b></a><br></p><p style="font-size:12.8px;margin:0in 0in 0.0001pt;line-height:12.05pt;background-image:initial;background-repeat:initial"><span style="font-size:9.5pt;font-family:Arial,sans-serif"></span></p><p style="font-size:12.8px;margin:0in 0in 0.0001pt;line-height:12.05pt;background-image:initial;background-repeat:initial"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(102,110,118)">Compliance Officer</span></p><p style="font-size:12.8px;margin:0in 0in 0.0001pt;line-height:12.05pt;background-image:initial;background-repeat:initial"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(102,110,118)">Tucows, Inc<br><br></span></p></div></div></div></div></div>