<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:78210677;
mso-list-template-ids:-724037134;}
@list l0:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:393167672;
mso-list-type:hybrid;
mso-list-template-ids:-1120745672 213710542 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-start-at:2;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2
{mso-list-id:429592854;
mso-list-template-ids:959086614;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3
{mso-list-id:739787497;
mso-list-type:hybrid;
mso-list-template-ids:386304312 235829506 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l3:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l3:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l3:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l4
{mso-list-id:918952450;
mso-list-template-ids:-614280916;}
@list l4:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5
{mso-list-id:1244875873;
mso-list-type:hybrid;
mso-list-template-ids:-1087594444 235829506 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l5:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l5:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l5:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l6
{mso-list-id:1476070237;
mso-list-type:hybrid;
mso-list-template-ids:746479350 -1295192122 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l6:level1
{mso-level-start-at:2;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l6:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoPlainText">Dear TPR WG members,<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Please find below the notes and action items from today’s meeting.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">The next meeting will be on <b>Tuesday 18 October at 16:00 UTC.</b><o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Best regards,<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<div style="border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in">
<p class="MsoPlainText">Emily, Julie, Berry, and Caitlin<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
</div>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><b>ACTION ITEMS/HOMEWORK:<o:p></o:p></b></p>
<p class="MsoPlainText"><b><o:p> </o:p></b></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoPlainText" style="mso-list:l5 level1 lfo6"><b>ACTION ITEM: Staff to coordinate with WG members on a Doodle to select a time starting the first week of November for recurring weekly meetings on Thursdays.<o:p></o:p></b></li><li class="MsoPlainText" style="mso-list:l5 level1 lfo6"><b>ACTION ITEM: Jothan Frakes, Jim Galvin, Jody Kolker, and Rick Wilhelm have volunteered to compile a list of attack vectors and how the recommendations solve for them, or where they are out of scope.<o:p></o:p></b></li></ol>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><b>Notes:<o:p></o:p></b></p>
<p class="MsoPlainText"><b><o:p> </o:p></b></p>
<p class="MsoPlainText"><b>Proposed Agenda</b><o:p></o:p></p>
<p class="MsoPlainText"><b>11 October 2022</b><o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">1. Roll Call & SOI updates<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">2. Welcome and Chair Updates<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l1 level1 lfo4">With the schedule we’ve been looking at probably early next year we’ll be going to Council for a Project Change Request to extend our timeline to allow for more time to review public comments.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Also need to increase meetings to two per week – probably Thursday in addition to Tuesday. We’ll coordinate with WG members on timing.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Doubling up on meetings is the only way to come close to finishing our Phase 1a work on time – still highly probable that we’ll miss our milestone date even with doubling up meetings.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Hypothetically if we needed 3 months to complete our Phase 1 work, but the main reason for a Project Change Request is because of the potential impact on other work.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">When we complete the Phase 1 work, we aren’t done – we still have Phase 2. We are already committed to work well into 2024. We are getting into a pay me now or pay me later situation.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">With respect to the Project Change Request, the original plan was optimistic. We are starting to see signs that some of the topics in Phase 2 have some element of risk that could affect our Phase 1 work
– consider whether the Project Change Request should acknowledge that risk.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Bottom line is that we are severely behind schedule and need to catch up.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Leadership recommends going to 2 days per week starting in November and going through the end of the year.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">With so many tie-ins to Phase 2, give Phase 1a and b Final Report to Council but advise the Council not to take action on it. So Phase 1 and 2 recommendations would be considered as a package.<o:p></o:p></li></ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><b>ACTION ITEM: Staff to coordinate with WG members on a Doodle to select a time starting the first week of November for recurring weekly meetings on Thursdays.<o:p></o:p></b></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">3. Recap of ICANN75 Discussion<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l1 level1 lfo4">A lot of the discussions were around Losing FOA and also Gaining FOA.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">We came up with several possibilities but sounded like we didn’t want to get rid of the Losing FOA completely – preserve the ability to deny a transfer in flight – a type of Losing FOA.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Discussed 5-day window to NACK a transfer request – would the notification to the registrant be mandatory or optional?
<o:p></o:p></li></ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">4. Continue Discussion of Comments on Elimination of the Gaining and Losing FOA – Recommendations 1 & 2<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">See <b>pages 12-18 of the <a href="https://urldefense.com/v3/__https:/itp.cdn.icann.org/en/files/inter-registrar-transfer-policy-irtp/transfer-policy-review-initial-report-21-06-2022-en.pdf__;!!PtGJab4!77y4kIp1U9SDU5qMHYpOXdPCo-4PkALUt2cSkQ_1VgeskWTGMQjVlCSwa0C7Ri6O0SfJDcQHj456NupTqrs8W3wlSNu7aVQKlg$" title="https://urldefense.com/v3/__https://itp.cdn.icann.org/en/files/inter-registrar-transfer-policy-irtp/transfer-policy-review-initial-report-21-06-2022-en.pdf__;!!PtGJab4!77y4kIp1U9SDU5qMHYpOXdPCo-4PkALUt2cSkQ_1VgeskWTGMQjVlCSwa0C7Ri6O0SfJDcQHj456NupTqrs8W3w">Working
Group’s Phase 1A Initial Report [itp.cdn.icann.org]</a> and re-review the following:</b><o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l2 level1 lfo5"><a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/1xBQpbMbbJgaBHth2fucmEElQTc-pbaqbQIkAYS_kHS0/edit__;!!PtGJab4!77y4kIp1U9SDU5qMHYpOXdPCo-4PkALUt2cSkQ_1VgeskWTGMQjVlCSwa0C7Ri6O0SfJDcQHj456NupTqrs8W3wlSNtJ_SBgJg$" title="https://urldefense.com/v3/__https://docs.google.com/document/d/1xBQpbMbbJgaBHth2fucmEElQTc-pbaqbQIkAYS_kHS0/edit__;!!PtGJab4!77y4kIp1U9SDU5qMHYpOXdPCo-4PkALUt2cSkQ_1VgeskWTGMQjVlCSwa0C7Ri6O0SfJDcQHj456NupTqrs8W3wlSNtJ_SBgJg$">Recommendation
1 Public Comment Working Document [docs.google.com]</a><o:p></o:p></li><li class="MsoPlainText" style="mso-list:l2 level1 lfo5"><a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/1gyy9xfe0-ymW-irtY2gKSEy3za8IcG-GrF8EcCGE57g/edit__;!!PtGJab4!77y4kIp1U9SDU5qMHYpOXdPCo-4PkALUt2cSkQ_1VgeskWTGMQjVlCSwa0C7Ri6O0SfJDcQHj456NupTqrs8W3wlSNsjE-KTdQ$" title="https://urldefense.com/v3/__https://docs.google.com/document/d/1gyy9xfe0-ymW-irtY2gKSEy3za8IcG-GrF8EcCGE57g/edit__;!!PtGJab4!77y4kIp1U9SDU5qMHYpOXdPCo-4PkALUt2cSkQ_1VgeskWTGMQjVlCSwa0C7Ri6O0SfJDcQHj456NupTqrs8W3wlSNsjE-KTdQ$">Recommendation
2 Public Comment Working Document [docs.google.com]</a><o:p></o:p></li><li class="MsoPlainText" style="mso-list:l2 level1 lfo5"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%201_20220829.docx?version=2&modificationDate=1661939450000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%201_20220829.docx?version=2&modificationDate=1661939450000&api=v2">Public
Comment Review Tool – Recommendation 1</a>: All Comments<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l2 level1 lfo5"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%202_20220829.docx?version=1&modificationDate=1661772796000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%202_20220829.docx?version=1&modificationDate=1661772796000&api=v2">Public
Comment Review Tool - Recommendation 2</a>: All Comments<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l2 level1 lfo5"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%203_20220829.docx?version=1&modificationDate=1661772946000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%203_20220829.docx?version=1&modificationDate=1661772946000&api=v2">Public
Comment Review Tool - Recommendation 3</a>: Comments #10, #11, #12<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l2 level1 lfo5"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%204_20220829.docx?version=1&modificationDate=1661772959000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%204_20220829.docx?version=1&modificationDate=1661772959000&api=v2">Public
Comment Review Tool - Recommendation 4:</a> Comment #10<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l2 level1 lfo5"><a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-General_20220829.docx?version=1&modificationDate=1661778347000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-General_20220829.docx?version=1&modificationDate=1661778347000&api=v2">Public
Comment Review Tool – Additional Input</a>: Comments #1-#11<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l2 level1 lfo5"><a href="https://urldefense.com/v3/__https:/itp.cdn.icann.org/public-comment/proceeding/Initial*20Report*20on*20the*20Transfer*20Policy*20Review*20-*20Phase*201(a)-21-06-2022/submissions/Leap*20of*20Faith*20Financial*20Services*20Inc./LEAP-comments-Transfers-Phase1a-20220814-FINAL-15-08-2022.pdf__;JSUlJSUlJSUlJSUlJSU!!PtGJab4!77y4kIp1U9SDU5qMHYpOXdPCo-4PkALUt2cSkQ_1VgeskWTGMQjVlCSwa0C7Ri6O0SfJDcQHj456NupTqrs8W3wlSNvADeZ7FQ$" title="https://urldefense.com/v3/__https://itp.cdn.icann.org/public-comment/proceeding/Initial*20Report*20on*20the*20Transfer*20Policy*20Review*20-*20Phase*201(a)-21-06-2022/submissions/Leap*20of*20Faith*20Financial*20Services*20Inc./LEAP-comments-Transfers-Phas">Leap
of Faith Financial Services Comment [itp.cdn.icann.org]</a> (full text, especially pages 11-24, 31-39)<o:p></o:p></li></ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Discussion:<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l1 level1 lfo4">One option proposed was for the Gaining Registrar to set a TAC – but this would mean contacting the registry? Would there then be multiple TACs? Or a limit of one TAC? Seems like a huge operational
issue.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Gaining Registrar would have to set the TAC at the Registry. Is there a way to get consent from the registrant beforehand.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">As a reminder, the proposal starts on page 11 here:
<a href="https://itp.cdn.icann.org/public-comment/proceeding/Initial%20Report%20on%20the%20Transfer%20Policy%20Review%20-%20Phase%201(a)-21-06-2022/submissions/Leap%20of%20Faith%20Financial%20Services%20Inc./LEAP-comments-Transfers-Phase1a-20220814-FINAL-15-08-2022.pdf">
https://itp.cdn.icann.org/public-comment/proceeding/Initial%20Report%20on%20the%20Transfer%20Policy%20Review%20-%20Phase%201(a)-21-06-2022/submissions/Leap%20of%20Faith%20Financial%20Services%20Inc./LEAP-comments-Transfers-Phase1a-20220814-FINAL-15-08-2022.pdf</a>
<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">WG needs to decide what they are going to do with this proposal. Need to identify how this might work, or not.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Don’t need to take the proposal as one entity.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Should we add a 'verification' requirement for TAC release? Meaning, when requested, instead of sending the TAC, the losing Registrar notifies the registrant of the request and requires confirmation to
release the TAC. This gives the registrant a way to deny the TAC request.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">What problem are we trying to solve? This proposal is a radically different solution. Think that we have addressed the concerns he’s identified, but let’s confirm that in additional rationale. For
example, the keystone issue is access to the account at the registrar/reseller.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Key component of the proposal is to give the registrant the ability to deny a transfer in a 5-day window before it occurs – the ability that they no longer have in our recommendations.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Should separate the proposal from the Losing FOA.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">From the industry perspective it is impractical to implement. Should focus solely on the Losing FOA.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Frankly, I don’t see any significant benefit to requiring a 5 day period before the transfer TAC, nor do I see any significant benefit to a 5 day transfer request. I certainly don’t object to either
of these things but the benefit seems dubious to me with cornerstone of access to registrar/reseller account and the 30 day lock down after transfer (with notifications by losing registrar to RNH).<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Reinforce the key point that we don’t have to judge this proposal, but look at why he is making the proposal and asking if we have considered those issues.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">In the new system, there is no window for the registrant to NACK the transfer. Is there another way we can do this notification?<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Looking at the Leap of Faith proposal, should something like this go to Tech Ops? Analyzing whether it improves security? Does it make sense.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">In looking back at the proposal for the PTID – that was intended to solve the problem space of the TAC being vulnerable to theft. There are different goals with elements of this proposal.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Don’t think it’s a good idea to take this to Tech Ops.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">I’m sorry but I disagree with the path of evaluating his proposal. We should be focused on whether or not we have addressed the concerns he believes have not been addressed. If they have, we’re done,
move on. if not, then we can consider whether we want to change something we’re doing or consider his proposal directly.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Should default to the most modest changes we can make. Could be worthwhile for Tech Ops to take this up – they will be meeting in a few weeks.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Can we table this until we see what is in Phase 2, such as rollbacks?<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">On the issue of the Losing FOA and keeping that functionality, observation that with respect to the proposal the functionality is covered by the 30-day lock down.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">5-day denial stops it, the 30-day lock is not equivalent. 5-day window serves a different purpose. To get the domain back after transfer would involve a lot of people/work. The DNS has changed. Not
the same as the registrant denying a transfer.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Right now the window is 10 days; in reducing to 5-days we lost some registrant control.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Without being a technical specialist, I have problems to understand why we should change at the model. First, I agree that access to the losing control panel is the key challenge (and cannot be defined
in a PDP). Secondly - the model where the transfer start by getting the TAC from the Losing Registrar, is well understood and also been used by ccTLDs. Thirdly - we have no statistics indicating there is a high volume of hijacked domain names.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">However, I like what Rich is saying. While 5 day pre-transfer is not 100% equivalent to the 30-day lock down, I do think that the system as a whole covers what needs to be covered. That’s what we need
to document to address George’s concerns. His concerns are valid.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Questions are whether you make this mandatory or optional for registrars, and/or optional for registrants.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">I think we have to document that TAC request ACK/NACK better to address his concerns.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">What we are missing/gaps – and hence the need for the proposal – 1) ability for the registrant to NACK a transfer and 2) ability for the registrant to know where the domain name is being transfer.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Need to be very specific about whether it is optional or not for Compliance to do their job. They can enforce with “MUST” but not with “MAY”.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">We didn’t eliminate the Losing FOA, we moved it earlier in the process when the TAC is created. There is still an option to NACK if you think the request is not legitimate.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Ask ourselves what problem we are trying to solve. Are we trying to solve the transfer problem or the operational processes if the registrant got it wrong. If an account is hacked is this a problem
we have to solve? <o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Wonder if it’s useful for a subset of the WG to brainstorm the different attack vectors that we’ve seen and document how to address them (or not in scope).<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Even if we put additional NACK options, if the registrant’s account has been hacked then the domain is gone – there’s nothing to be done. Need additional security for that. For example, email compromises
happen all the time and we can’t solve for that.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Seems that Jody and Jim would be willing to catalog the risk vectors and how we are solving for them, or not.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Volunteers: Jothan Frakes, Jim Galvin, Jody Kolker, and Rick Wilhelm.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Once the TAC is provided there is no ability for the registrant to get it back. Could fix this by not immediately sending the TAC, but sending a notification first. Need to address this loss that registrants
are feeling.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4">Note that Rick, Jody, Jothan, and Jim have been back channeling. They will all be at CPS in two weeks. They’re going to find some time to meet and with any luck knock most of this out.<o:p></o:p></li><li class="MsoPlainText" style="mso-list:l1 level1 lfo4"><b><i>Roger: We should try to document a proposal for Losing FOA with a smaller window for the NACK. A notification is sent as soon as the TAC/Transfer is requested, registrant gets X days (should be
less than 5 days to fit next req) to approve/deny and Registrar still must provide TAC within 5 days of original request.<o:p></o:p></i></b></li></ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><b>ACTION ITEMS: Jothan Frakes, Jim Galvin, Jody Kolker, and Rick Wilhelm have volunteered to compile a list of attack vectors and how the recommendations solve for them, or where they are out of scope.<o:p></o:p></b></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">AOB<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
</div>
</body>
</html>