<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:472256880;
mso-list-template-ids:1301044826;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:572592100;
mso-list-template-ids:2140167692;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2
{mso-list-id:784230111;
mso-list-template-ids:-1931020388;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3
{mso-list-id:1068923410;
mso-list-type:hybrid;
mso-list-template-ids:-720978486 -355036950 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l3:level1
{mso-level-start-at:2;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l4
{mso-list-id:1224293169;
mso-list-template-ids:317857936;}
@list l4:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5
{mso-list-id:1244875873;
mso-list-type:hybrid;
mso-list-template-ids:-1087594444 235829506 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l5:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l5:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l5:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l6
{mso-list-id:1476606962;
mso-list-type:hybrid;
mso-list-template-ids:-78734682 386543070 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l6:level1
{mso-level-start-at:2;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l6:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l7
{mso-list-id:1960795051;
mso-list-template-ids:-340379182;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoPlainText">Dear TPR WG members,</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Please find below the notes and action items from today’s meeting.</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">The next meeting will be <b><i>in two weeks</i></b> on <b>
Tuesday 08 November at 16:00 UTC.</b></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Best regards,</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<div style="border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in">
<p class="MsoPlainText">Emily, Julie, Berry, and Caitlin</p>
<p class="MsoPlainText"><o:p> </o:p></p>
</div>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><b>ACTION ITEMS/HOMEWORK:<o:p></o:p></b></p>
<p class="MsoPlainText"><b><o:p> </o:p></b></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoPlainText" style="mso-list:l5 level1 lfo3"><b>Jothan Frakes, Jim Galvin, Jody Kolker, and Rick Wilhelm have volunteered to compile a list of attack vectors and how the recommendations solve for them, or where they are out of scope.<o:p></o:p></b></li><li class="MsoPlainText" style="mso-list:l5 level1 lfo3"><b>For Recommendation #3 -- WG members to review the language in the Implementation note and suggest improvements. See page 4 in the Working Document at:
<a href="https://docs.google.com/document/d/1SaEV9vjiSZONjHvnXj3zbPVTTflDTo4WphZrbqDTmxU/edit?usp=sharing">
https://docs.google.com/document/d/1SaEV9vjiSZONjHvnXj3zbPVTTflDTo4WphZrbqDTmxU/edit?usp=sharing</a>.
<o:p></o:p></b></li></ol>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><b>Notes:<o:p></o:p></b></p>
<p class="MsoPlainText"><b><o:p> </o:p></b></p>
<p class="MsoPlainText"><b>Transfer Policy Review - Meeting #63<o:p></o:p></b></p>
<p class="MsoPlainText"><b>Proposed Agenda<o:p></o:p></b></p>
<p class="MsoPlainText"><b>25 October 2022<o:p></o:p></b></p>
<p class="MsoPlainText"><b> <o:p></o:p></b></p>
<p class="MsoPlainText">1. Roll Call & SOI updates</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">2. Welcome and Chair Updates</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l3 level1 lfo10">No call next week (01 November) due to the CPH Summit, starting up twice-a-week meetings the following week (with 10 November).</li></ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Timeline see: <a href="https://community.icann.org/display/TPRPDP/2022-10-25+Transfer+Policy+Review+PDP+WG+Call">
https://community.icann.org/display/TPRPDP/2022-10-25+Transfer+Policy+Review+PDP+WG+Call</a>
</p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Berry:
<ul style="margin-top:0in" type="circle">
<li class="MsoPlainText" style="mso-list:l6 level2 lfo6">First, this is very much conceptual in nature and doesn’t cover all of the mechanics of doing a domain transfer.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Three depictions – current, Initial Report, proposed.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Depicts fake phases. Just trying to focus on when the transfer is eligible for transfer – all issues are cured. What is good about this approach versus the swimlane diagram, which can’t represent all
of the timeframes.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6"><u>At the top</u>: current state, with the Gaining FOA and authorization can’t happen because of GDPR. Interesting in going back when a transfer was initiated at the Gaining Registrar it could live up
to 60 days. If there is no NACK at the end of the process the default approval is set at 5 days.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6"><u>In the middle</u>: based on the recommendations in the Initial Report – what is interesting here is you can see what the preliminary recommendations do to the current process. No easy way to show
that the TAC gets submitted to the Gaining Registrar could wait until just under 14 days before the TTL expires. But the moment the TAC is submitted to the Gaining Registrar the transfer is initiated.
</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6"><u>Last row</u>: Under consideration based on public comments – does not represent that there is a final decision (orange boxes), just for discussion. Timing depends on when they submit the TAC to the
Gaining Registrar.</li></ul>
</li></ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">3. Continue Discussion of Comments on Elimination of the Losing FOA – Recommendation 2 (see <a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%202_20220829.docx?version=1&modificationDate=1661772796000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%202_20220829.docx?version=1&modificationDate=1661772796000&api=v2">Public
Comment Review Tool</a> and <a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/1gyy9xfe0-ymW-irtY2gKSEy3za8IcG-GrF8EcCGE57g/edit__;!!PtGJab4!8EDzIDATb57WbfIoSp3iWCyuspiXiubvw5Um15S42IsIn0o2vyqSNflqotx_9WtkAjsS_w1x0DLV6pd0mf9KxL8wXiyD4GPThw$" title="https://urldefense.com/v3/__https://docs.google.com/document/d/1gyy9xfe0-ymW-irtY2gKSEy3za8IcG-GrF8EcCGE57g/edit__;!!PtGJab4!8EDzIDATb57WbfIoSp3iWCyuspiXiubvw5Um15S42IsIn0o2vyqSNflqotx_9WtkAjsS_w1x0DLV6pd0mf9KxL8wXiyD4GPThw$">Working
Document [docs.google.com]</a>)</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Proposal based on Public Comment adds complexity to the process.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Gives RNH them a window of time to NACK – either in a 5-day window or shorter. As today, it is an auto-ACK process; if no NACK it will be ACKed.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Issue with the proposal: The Losing FOA – there is no pending transfer. Doesn’t really do anything because the transfer has already gone through. Putting them back in the process continues to do nothing.
Like the option to NACK up front because the minute the TAC is released the transfer is live.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">The idea is that the orange box goes back to what it is today.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">The RNH must inform the Gaining Registrar about the TAC to start the transfer.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">So we have to now define a pending Transfer period then.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Issue is that the TAC is vulnerable for up to 14 days. If you put the NACK at the end the RNH can still stop it.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Clarification: regarding the rationale for what was done with the TAC – the security of the AuthInfo code in the current system was a message – long period of vulnerability; changes in the Initial Report
have addition security measures when setting the TAC.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">If we are going to recommend additional requirements also see if we can address the issue that when a TAC is requested it is not automatically generated. You can bypass the problem of the Losing FOA
by getting an ACK/approval when the TAC is requested.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Some comments noted that there is a window from when the TAC is provisioned/communicated when the TAC is given to the Gaining Registrar the Registry processes it and it is gone. The functionality that
gives the RNH the ability to stop the transfer once the Gaining Registrar is known is critical to some commenters. There still is the problem of TAC vulnerability once provisioned and putting the NACK at the end (once the Gaining Registrar is known) addresses
this problem.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">If an account is breached, all options are out the window, as it's already breached, regardless of which process we decide.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Suggested 'step' simply adds a verification option, which gives a Registrant a chance to deny. Since there's no room to deny later in the process.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">The losing FOA is a warm fuzzy option at this option. My take away from the public comment is that people don’t really understand how the security profile is implemented and how what we have is actually
better than what was had before. I’m hoping that the text that the small team will propose will make this more clear and if so we can add it to the document and it will help others too.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">If this is solving extreme scenarios not sure it is worth the effort.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Not sure about the 'adding dev cycles' since we're already sending a 'notice of TAC provision' this simply modifies that so instead of delivering the TAC initially, it informs the registrant of the request
and how to deny it, if ignored it will be sent within the 120 hour window.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">If we move it forward from where it is today, it will require more development.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Do we need to see what the small team will give us before we make a decision? The small team is looking at just the different threats that can occur and how they are solved or not.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Compliance data regarding unauthorized transfers. Transfer complaints previously provided to the WG can be found here:
<a href="https://community.icann.org/display/TPRPDP/Metrics">https://community.icann.org/display/TPRPDP/Metrics</a>
</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">If we move the NACK to the front everyone has work to do, or if we leave it where it’s at we still get the security advantage without the extra work.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Reminder, Registrars will still have to educate their customers on the new process regardless.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Not sure how At-Large will address it, but in discussion in the CCWG is that we want as secure a process as possible, without being complex or lengthy, but this doesn’t lie in the policy but in the registrar
processes. We have to identify what we initially agreed in the WG in the preliminary recommendations was a great step forward.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">BC/Zach will get back after consulting with his group.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">The issue is not whether this functionality should exist or not, even if some think it’s fluffy, just where it should happen/lie in the process --- beginning or where it is now.</li></ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">4. Continue Discussion of Notification of TAC Provision – Recommendation 3 (see <a href="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%203_20220829.docx?version=1&modificationDate=1661772946000&api=v2" title="https://community.icann.org/download/attachments/201949311/gnso-TPR-P1A-pcrt-Initial-Report-Recommendations_Rec%203_20220829.docx?version=1&modificationDate=1661772946000&api=v2">Public
Comment Review Tool</a> and <a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/1SaEV9vjiSZONjHvnXj3zbPVTTflDTo4WphZrbqDTmxU/edit__;!!PtGJab4!8EDzIDATb57WbfIoSp3iWCyuspiXiubvw5Um15S42IsIn0o2vyqSNflqotx_9WtkAjsS_w1x0DLV6pd0mf9KxL8wXiyq48SsVw$" title="https://urldefense.com/v3/__https://docs.google.com/document/d/1SaEV9vjiSZONjHvnXj3zbPVTTflDTo4WphZrbqDTmxU/edit__;!!PtGJab4!8EDzIDATb57WbfIoSp3iWCyuspiXiubvw5Um15S42IsIn0o2vyqSNflqotx_9WtkAjsS_w1x0DLV6pd0mf9KxL8wXiyq48SsVw$">Working
Document [docs.google.com]</a>)</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l6 level1 lfo6">One of the considerations for Recommendations #3 and #4 is whether we will keep these notifications. If we assume that – regardless of Recommendation #2 – then we can dive into the specifics.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Recommendation #3 has to exist regardless of whether we retain the Losing FOA.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Public Comments Review:
<ul style="margin-top:0in" type="circle">
<li class="MsoPlainText" style="mso-list:l6 level2 lfo6">First few are about the Losing FOA.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">About the tech contact being an important recipient -- that was assuming that contact would receive the notice of TAC provision (not the TAC). Question of who that contact would be – admin contact is
going away. Having a database of additional contacts is a risk.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">The principle of notifications is essential – when to notify either at provision or at request – it depends on how far apart are there two steps. If there is a gap then there should be two notifications.
The second part is whether you should notify more than one person – from a security perspective it would be good to have more than one notification, but not mandatory – SHOULD and not MUST.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">If the group changed course and sent the notification to multiple contacts, the notice would have to be distinct from the provision of the TAC itself.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Having an optional additional contact might be helpful, but having the contact on file doesn’t add anything.
</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Adding contacts who aren’t customers sounds a complex issue for GDPR. The current recommendations don’t preclude from doing this. Or could be optional but not required.
</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">What if one contact NACKs the transfer and one ACKs it? Only one should get the option to NACK/ACK.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Does this need to be policy?</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Summary: Leave it as a MUST for notification to the RNH and leave the other options out of the policy.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Number of comments about how the recommendations don’t address a customer using a privacy/proxy service. Staff drafted text for an implementation note:</li></ul>
</li></ul>
<p class="MsoPlainText" style="margin-left:1.25in"><b>Potential next step:</b> Strawman revision:<br>
<br>
<b><u>Recommendation 3</u>: </b>The working group recommends that the Registrar of Record MUST send a “Notification of TAC Provision” to the RNH,
<s>as listed in the registration data at the time of the TAC request</s>, without undue delay but no later than 10 minutes after the Registrar of Record provides the TAC.<br>
<br>
Implementation Note: For the purposes of sending the notification, the Registrar of Record should use contact information as it was in the registration data at the time of the TAC request. In cases where a customer uses a Privacy/Proxy service, the Registrar
of Record should send the notification directly to contact information associated with the underlying customer where it is possible to do so</p>
<p class="MsoPlainText" style="margin-left:1.5in"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<ul style="margin-top:0in" type="circle">
<li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Question: Should this only refer to Proxy service? Proxy service is RNH, whereas for Privacy service, the underlying customer is RNH.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">No registrar would send the TAC to the proxy service.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">My concern is that the proxy service should not be doing the transfer- it should be the underlying customer/domain registrant.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Do we need the implementation note?
</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Not sure the distinction between privacy and proxy is necessary if you are talking about the underlying customer.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">Think what we are saying is for the recommendation we can strike out “<s>as listed in the registration data at the time of the TAC request”</s>. If we have an Implementation note we could improve the
language to call out the issue of the underlying customer is known.</li><li class="MsoPlainText" style="mso-list:l6 level2 lfo6">If keeping the note, we still have to realize that Registrars may not have access to underlying data.</li></ul>
</ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><b>ACTION ITEM: For Recommendation #3 -- WG members to review the language in the Implementation note and suggest improvements. See page 4 in the Working Document at:
<a href="https://docs.google.com/document/d/1SaEV9vjiSZONjHvnXj3zbPVTTflDTo4WphZrbqDTmxU/edit?usp=sharing">
https://docs.google.com/document/d/1SaEV9vjiSZONjHvnXj3zbPVTTflDTo4WphZrbqDTmxU/edit?usp=sharing</a>.
<o:p></o:p></b></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">For next meeting – review comment from ICANN org: “Include additional elements required to be included in the “Notification of TAC Provision” such as:<o:p></o:p></p>
<p class="MsoPlainText">* An element that explains that the TAC will enable the transfer of the domain name to another registrar.<o:p></o:p></p>
<p class="MsoPlainText">* The deadline by which the RNH must take action if the request is invalid so that the registrar has sufficient time to NACK the transfer, where applicable (note that, at the time the RNH receives the “Notification of TAC Provision”,
the TAC may have already been provided and the transfer command sent to the registry operator).<o:p></o:p></p>
<p class="MsoPlainText">* Required actions registrars must take (and by when) upon receiving notification by the RNH of an invalid request.”<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">6. AOB -- Work Plan for Reviewing Public Comments – see attached and below:</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Suggestion is to go through the recommendations sequentially.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Will adjust the work plan as we go after each meeting.</li><li class="MsoPlainText" style="mso-list:l6 level1 lfo6">Try to wrap up the public comment review by the end of the year.</li></ul>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><u>Work Plan<o:p></o:p></u></p>
<p class="MsoPlainText">25-10-22: Meeting #63 - Review of public comments for Phase 1A - Recs #2, #3, #4 TPR WG 10/25/22 In Progress PC review<o:p></o:p></p>
<p class="MsoPlainText">08-11-22: Meeting #64 - Review of public comments for Phase 1A - Recs #3, #4, and Question for Community Input on Rec #4 TPR WG 11/08/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">10-11-22: Meeting #65 - Review of public comments for Phase 1A - Recs #5, #6, #7 TPR WG 11/10/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">15-11-22: Meeting #66 - Review of public comments for Phase 1A - Rec #7, #8 TPR WG 11/15/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">17-11-22: Meeting #67 - Review of public comments for Phase 1A - #9, #10, #11, #12 TPR WG 11/17/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">22-11-22: Meeting #68 - Review of public comments for Phase 1A - #13, #14, and Question for Community Input on Rec #14 TPR WG 11/22/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">29-11-22: Meeting #69 - Review of public comments for Phase 1A - Question for Community Input on Rec #14, [no comments on #15], #16, #17 TPR WG 11/29/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">01-12-22: Meeting #70 - Review of public comments for Phase 1A - Rec #16, #17 TPR WG 12/01/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">06-12-22: Meeting #71 - Review of public comments for Phase 1A - Rec #18, #19 TPR WG 12/06/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">08-12-22: Meeting #72 - Review of public comments for Phase 1A - Rec #20, #21, #22 TPR WG 12/08/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">13-12-22: Meeting #73 - Review of public comments for Phase 1A - Charter Questions and Report Text; Additional Suggested Topics and Proposals TPR WG 12/13/22 Not 15-15-12-22: Started PC review<o:p></o:p></p>
<p class="MsoPlainText">20-12-22: Meeting #74 - Review of public comments for Phase 1A - WG Processes and Modalities; Additional Input TPR WG 12/15/22 Not Started PC review<o:p></o:p></p>
<p class="MsoPlainText">22-12-22: Meeting #75 - Review of public comments for Phase 1A</p>
</div>
</body>
</html>