<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1041710664;
mso-list-template-ids:-50837028;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:1365254171;
mso-list-template-ids:-898046994;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2
{mso-list-id:1370060680;
mso-list-template-ids:-363189232;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3
{mso-list-id:1472016589;
mso-list-template-ids:-300615068;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4
{mso-list-id:1737975625;
mso-list-template-ids:890402216;}
@list l4:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5
{mso-list-id:1790398123;
mso-list-template-ids:-2101068588;}
@list l5:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l6
{mso-list-id:1917282679;
mso-list-type:hybrid;
mso-list-template-ids:1637620084 -367890952 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l6:level1
{mso-level-start-at:2;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l6:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoPlainText">Dear TPR WG members,</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Please find below the brief notes from today’s meeting. <b>
<i>Please note that these brief notes are not a substitute for the recording or transcript.
<o:p></o:p></i></b></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">The next meeting will be on <b>Tuesday, 04 October at 16:00 UTC.</b></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Best regards,</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<div style="border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in">
<p class="MsoPlainText">Emily, Julie, Berry, and Caitlin</p>
<p class="MsoPlainText"><o:p> </o:p></p>
</div>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><b>Notes:<o:p></o:p></b></p>
<p class="MsoPlainText"><b><o:p> </o:p></b></p>
<p class="MsoPlainText"><b>Transfer Policy Review – ICANN75 Session</b></p>
<p class="MsoPlainText"><b>Proposed Agenda</b></p>
<p class="MsoPlainText"><b>17 September 2022</b></p>
<p class="MsoPlainText"> </p>
<p class="MsoPlainText" style="margin-left:.25in;text-indent:-.25in;mso-list:l4 level1 lfo2">
<![if !supportLists]><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Welcome</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText" style="margin-left:.25in;text-indent:-.25in;mso-list:l4 level1 lfo2">
<![if !supportLists]><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>PDP Introduction and Status</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Not going to go through everything; just to give you some background to follow.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">See the slides at: <a href="https://community.icann.org/download/attachments/208208420/Transfer%20Policy%20PDP%20-%20ICANN75.pdf?version=1&modificationDate=1663093458000&api=v2">
https://community.icann.org/download/attachments/208208420/Transfer%20Policy%20PDP%20-%20ICANN75.pdf?version=1&modificationDate=1663093458000&api=v2</a></li></ul>
<p class="MsoPlainText" style="margin-left:.5in"><o:p> </o:p></p>
<p class="MsoPlainText">3. Discussion of <a href="https://community.icann.org/display/TPRPDP/Phase+1A+-+Public+Comment+Review+Tool" title="https://community.icann.org/display/TPRPDP/Phase+1A+-+Public+Comment+Review+Tool">Public Comments</a> on the Working Group's <a href="https://urldefense.com/v3/__https:/itp.cdn.icann.org/en/files/inter-registrar-transfer-policy-irtp/transfer-policy-review-initial-report-21-06-2022-en.pdf__;!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt4j8AAsD-gVg$" title="https://urldefense.com/v3/__https://itp.cdn.icann.org/en/files/inter-registrar-transfer-policy-irtp/transfer-policy-review-initial-report-21-06-2022-en.pdf__;!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt">Phase
1A Initial Report [itp.cdn.icann.org]</a><br>
<br>
</p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Focus: Recommendation 1 to Eliminate the Gaining Form of Authorization and Recommendation 2 to Eliminate the Losing Form of Authorization (FOA)</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Materials to review for this discussion: </li></ul>
<p class="MsoPlainText" style="margin-left:.5in"><b>Pages 12-18 of the <a href="https://urldefense.com/v3/__https:/itp.cdn.icann.org/en/files/inter-registrar-transfer-policy-irtp/transfer-policy-review-initial-report-21-06-2022-en.pdf__;!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt4j8AAsD-gVg$" title="https://urldefense.com/v3/__https://itp.cdn.icann.org/en/files/inter-registrar-transfer-policy-irtp/transfer-policy-review-initial-report-21-06-2022-en.pdf__;!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt">Working
Group’s Phase 1A Initial Report [itp.cdn.icann.org]</a></b><br>
<a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/1xBQpbMbbJgaBHth2fucmEElQTc-pbaqbQIkAYS_kHS0/edit__;!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt4j8CihBsiaQ$" title="https://urldefense.com/v3/__https://docs.google.com/document/d/1xBQpbMbbJgaBHth2fucmEElQTc-pbaqbQIkAYS_kHS0/edit__;!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt4j8CihBsiaQ$">Recommendation
1 Public Comment Working Document [docs.google.com]</a></p>
<p class="MsoPlainText" style="margin-left:.5in"><a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/1gyy9xfe0-ymW-irtY2gKSEy3za8IcG-GrF8EcCGE57g/edit__;!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt4j8DVddRnCQ$" title="https://urldefense.com/v3/__https://docs.google.com/document/d/1gyy9xfe0-ymW-irtY2gKSEy3za8IcG-GrF8EcCGE57g/edit__;!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt4j8DVddRnCQ$">Recommendation
2 Public Comment Working Document [docs.google.com]</a></p>
<p class="MsoPlainText" style="margin-left:.5in"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%201_20220829.docx?version=2&modificationDate=1661939450000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%201_20220829.docx?version=2&modificationDate=1661939450000&api=v2">Public
Comment Review Tool – Recommendation 1</a>: All Comments</p>
<p class="MsoPlainText" style="margin-left:.5in"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%202_20220829.docx?version=1&modificationDate=1661772796000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%202_20220829.docx?version=1&modificationDate=1661772796000&api=v2">Public
Comment Review Tool - Recommendation 2</a>: All Comments</p>
<p class="MsoPlainText" style="margin-left:.5in"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%203_20220829.docx?version=1&modificationDate=1661772946000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%203_20220829.docx?version=1&modificationDate=1661772946000&api=v2">Public
Comment Review Tool - Recommendation 3</a>: Comments #10, #11, #12</p>
<p class="MsoPlainText" style="margin-left:.5in"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%204_20220829.docx?version=1&modificationDate=1661772959000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%204_20220829.docx?version=1&modificationDate=1661772959000&api=v2">Public
Comment Review Tool - Recommendation 4:</a> Comment #10</p>
<p class="MsoPlainText" style="margin-left:.5in"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-General_20220829.docx?version=1&modificationDate=1661778347000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-General_20220829.docx?version=1&modificationDate=1661778347000&api=v2">Public
Comment Review Tool – Additional Input</a>: Comments #1-#11</p>
<p class="MsoPlainText" style="margin-left:.5in"><a href="https://urldefense.com/v3/__https:/itp.cdn.icann.org/public-comment/proceeding/Initial*20Report*20on*20the*20Transfer*20Policy*20Review*20-*20Phase*201(a)-21-06-2022/submissions/Leap*20of*20Faith*20Financial*20Services*20Inc./LEAP-comments-Transfers-Phase1a-20220814-FINAL-15-08-2022.pdf__;JSUlJSUlJSUlJSUlJSU!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt4j8DEZWBK0Q$" title="https://urldefense.com/v3/__https://itp.cdn.icann.org/public-comment/proceeding/Initial*20Report*20on*20the*20Transfer*20Policy*20Review*20-*20Phase*201(a)-21-06-2022/submissions/Leap*20of*20Faith*20Financial*20Services*20Inc./LEAP-comments-Transfers-Phas">Leap
of Faith Financial Services Comment [itp.cdn.icann.org]</a> (full text, especially pages 11-24, 31-39)</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoNormal">Summary of WG Discussion on 13 September:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><b>WG discussion and agreement: </b>
In initial discussions, working group members did not believe that the relevant comments present new information. Working group members expressed that the recommendations remain appropriate, but that the rationale for recommendation 2 should be augmented to
fully explain why the recommended approach offers an appropriate level of security to registrants. Points to emphasize in rationale:<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.75in;text-indent:-.25in;mso-list:l1 level1 lfo8">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>The first and most important line of defense and the primary point of control is logging into the account at the Registrar. This is the “affirmative consent” to initiate the transfer.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.75in;text-indent:-.25in;mso-list:l1 level1 lfo8">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>Once an attacker has logged into the control panel, they can change the points of contact, including who receives the FOA/notifications, eliminating the utility of the FOA/notifications in that scenario. This is true with FOA
and will also be true with notifications. The properties of the two are very similar.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.75in;text-indent:-.25in;mso-list:l1 level1 lfo8">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>Additional security is provided in the recommended approach because the TAC is generated on demand and is therefore less vulnerable to theft.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.75in;text-indent:-.25in;mso-list:l1 level1 lfo8">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>The Losing Registrar still has 5 days to provision the TAC. As a business decision, the Registrar has the discretion to delay provision of the take additional steps including to perform due diligence during that window. Registrars
will decide if and how to use that period based on their chosen approach as well as the type/value of the domain. Registrar due diligence can give extra protection to the registrant. Delayed provision of the TAC also gives registrants more time to respond
to notifications, to the extent they are receiving notifications (attacker has not updated contact into). Registrants have the choice to pick a Registrar that fits their needs. <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.75in;text-indent:-.25in;mso-list:l1 level1 lfo8">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>The proposed 30-day post-transfer lock helps to ensure that if a domain is stolen, domain hopping will be slowed, allowing the Losing and Gaining Registrars to work together to resolve the problem.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.25in">This recommendation may prompt registrars to take a “backdoor security measure” by delaying the time between people asking for Transfer Authorization Codes (TACs) and issuing them to customers, which will ultimately
burden domain registrants. They would not be able to complete the domain transfer process in one sitting.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><b>WG discussion and agreement:</b> In initial discussions, WG members noted that they see optional delayed provision of the TAC as a feature, not a bug. <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.75in;text-indent:-.25in;mso-list:l2 level1 lfo9">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>As a business decision, the Registrar has the discretion to delay provision of the take additional steps including to perform due diligence during that window. <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.75in;text-indent:-.25in;mso-list:l2 level1 lfo9">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>Registrars will decide if and how to use that period based on their chosen approach as well as the type/value of the domain. <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.75in;text-indent:-.25in;mso-list:l2 level1 lfo9">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>Registrar due diligence can give extra protection to the registrant. <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in">Delayed provision of the TAC also gives registrants more time to respond to notifications, to the extent they are receiving notifications (attacker has not updated contact into). Registrants have the choice to
pick a Registrar that fits their needs.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.25in">The authorization of Losing FOA should remain with the Registrant, not the Registrar.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in">RFC 9154 is unequivocal: "A transfer is coordinated by the REGISTRANT to transfer the sponsorship of the object from one registrar to another." Any transfer coordinated by a losing registrar (or a gaining registrar),
or registry, or anyone other than the REGISTRANT violates RFC 9154.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><b>WG discussion and agreement: </b>
One of the co-authors of RFC9154 who is a member of the WG disagreed with the commenter’s interpretation of the RFC. The RFC is not making a normative statement that would impose policy on the ICANN process. In addition, the registrant is still coordinating
the process with the new proposed process, so the new process would be consistent with the RFC language.<o:p></o:p></p>
<p class="MsoPlainText" style="margin-left:.25in"><o:p> </o:p></p>
<p class="MsoPlainText" style="margin-left:.25in">Measures to increase security of the TAC are insufficient to justify elimination of the Losing FOA. The TAC is an extremely valuable asset that is vulnerable to theft or use by third parties once it has been
generated. The WG’s recommendations to strengthen elements of TAC security do not address this vulnerability.<o:p></o:p></p>
<p class="MsoPlainText" style="margin-left:.25in"><o:p> </o:p></p>
<p class="MsoPlainText" style="margin-left:.25in"><b>WG discussion and agreement:</b> In initial discussion, members emphasized that with the new recommendations, the TAC will be generated on demand and will only be available for 14 days after being generated.
This is significant improvement to the security of the TAC. While it is true that the TAC can be stolen once it has been generated, WG members noted that is the case in the current environment, as well.
<o:p></o:p></p>
<p class="MsoPlainText" style="margin-left:.25in"><o:p> </o:p></p>
<p class="MsoPlainText" style="margin-left:.25in">Additional data/reference points that the respondent believes the WG should review in considering retention of the Losing FOA: NACKed transfers as listed in TPSR, data on Canadian mobile phone number transfers/thefts,
ARIN's procedures for the transfer of IP addresses, SSAC Advice: SAC040, SAC044, SAC074.<o:p></o:p></p>
<p class="MsoPlainText" style="margin-left:.25in"><o:p> </o:p></p>
<p class="MsoPlainText" style="margin-left:.25in"><b>WG discussion and agreement:</b> In initial discussions, WG members noted that the number of NACKed transfers can’t be used to understand the number of domain thefts, because transfers are also NACKed for
other reasons. <o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Discussion of Leap of Faith Comments: Link to <a href="https://urldefense.com/v3/__https:/itp.cdn.icann.org/public-comment/proceeding/Initial*20Report*20on*20the*20Transfer*20Policy*20Review*20-*20Phase*201(a)-21-06-2022/submissions/Leap*20of*20Faith*20Financial*20Services*20Inc./LEAP-comments-Transfers-Phase1a-20220814-FINAL-15-08-2022.pdf__;JSUlJSUlJSUlJSUlJSU!!PtGJab4!5BpERb5gGHoqUmiGpDMUO63lr3vG4KKtiNY995SjMeuNNW0YkMkXLnww7vtca9dWg0XWkaXYmbBJOwlKnCsbdHt4j8DEZWBK0Q$" title="https://urldefense.com/v3/__https://itp.cdn.icann.org/public-comment/proceeding/Initial*20Report*20on*20the*20Transfer*20Policy*20Review*20-*20Phase*201(a)-21-06-2022/submissions/Leap*20of*20Faith*20Financial*20Services*20Inc./LEAP-comments-Transfers-Phas">
Leap of Faith Financial Services Comment [itp.cdn.icann.org]</a> (full text, especially pages 11-24, 31-39)<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Keep the 5-day window that registrars can roll back – minimum standard for registrars.
</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Talked about when a request for a transfer is made that a notice has to be sent (mandatory). WG should consider whether this makes sense.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Also discussed having the gaining IANA ID. Would help know where it was going – asked this as a question in the public comments.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Need to retain the losing FOA --- once the TAC is generated the registrants are on their own.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Need to think about what we are talking about as a practical matter. The TAC is ephemeral. The TTL can be set to very low levels. Help registrants to restrict transfers.
</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">The majority of the recommendations go together.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Comments center on the registrant no longer getting a 5-day window.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">You could have an secure PTID that the domain is being transferred to.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Many registrants don’t log into their registrar very frequently, so lose the ability to NACK.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">If we keep the existing approach and improve the rationale – see 2.2 existing text seems to suggest there is a means to NACK the transfer, but we may need to make it clear that while this is true, it
is a very small window. But before that even happens is there a chance to stop it? The comments are getting to allowing the registrant to NACK the transfer – and making that window (to NACK, be it 5-day or otherwise) mandatory.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">What is the argument against having some window that allows the registrant to NACK the transfer.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Give registrants the choice to have the losing FOA; this report suffers from lack of data – giving a choice would allow ICANN to see who opted in.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Question to George Kirikos: Would having a transfer window plus an embedded Gaining Registrar IANA ID be better than the WG’s current proposal? Answer: Yes to the IANA ID but not the transfer window.
George’s breakthrough proposal is still preferable.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Just have a few options: 1) keep the recommendation as is with no changes; 2) keep the recommendation but provide better rationale to address the comments/concerns; 3) modify it so it supports what the
commenters are proposing.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">There are problems identifying the registrar from the embedded IANA ID for most registrants.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Problems would be eliminated if you “push” the ID.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">It is a problem today that registrants don’t know where the transfer is going.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Might be that the WG members should look at what can happen at the gaining registrar.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Section E of George Kirikos proposal: Registrant would go to the Gaining Registrar that would create an ID (ends to a destination account, like a wire transfer), registrant would take that to the Losing
Registrar and enter the name – still need to preserve the Losing FOA step.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Couldn’t someone still hack and get the ID? Yes, and that is why you need the Losing FOA.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">But then the Losing FOA would go to the hacker.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Just need to create a somewhat secure transfer system because it seems that the security is in the multi-factor authentication, which is outside of the transfer policy.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo5">Registries offer additional security mechanisms such as locks.</li></ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">4. Wrap up</p>
<p class="MsoPlainText"> </p>
<p class="MsoPlainText"><o:p> </o:p></p>
</div>
</body>
</html>