<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
font-size:10.0pt;
font-family:"Courier New";}
span.gmail-il
{mso-style-name:gmail-il;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">While I’m sympathetic to this situation, the registrar with IANA number 2482 (Sticting Registrar of Last Resort Foundation) does not have special standing. It is one registrar accreditation among many.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Granted, it has a different type of “business model” than the typical registrar, but it has the same accreditation.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">There might be space in the ecosystem for a special type of registrar accreditation, designated toward warehousing bad domains. (Think of a “bad registrar” program, modeled after the concept of a “bad bank”
IRL: <a href="https://en.wikipedia.org/wiki/Bad_bank">https://en.wikipedia.org/wiki/Bad_bank</a> .) But that sort of thing doesn’t exist.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Regardless, it would seem to be a huge step for the Transfer PDP to be moving in the direction of creating distinctions between registrars.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Happy to discuss further on Tuesday.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Rick<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">GNSO-TPR <gnso-tpr-bounces@icann.org> on behalf of Mike Rodenbaugh <mike@rodenbaugh.com><br>
<b>Date: </b>Thursday, December 8, 2022 at 12:30 PM<br>
<b>To: </b>Transfer PDP WG <gnso-tpr@icann.org><br>
<b>Subject: </b>[EXTERNAL] Re: [GNSO-TPR] Reason why Losing Registrar may NACK<o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><strong><span style="font-size:9.0pt;font-family:Helvetica;color:black;background:yellow">CAUTION: This email came from outside your organization. Don’t trust emails, links, or attachments from senders that seem suspicious or you are not
expecting.</span></strong><span style="font-size:9.0pt;font-family:Helvetica;color:black"><o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:11.0pt">
<hr size="0" width="100%" align="center">
</span></div>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks all for the healthy discussion on this issue on today's WG call.<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">As I mentioned, perhaps if the registrar has clear and convincing evidence that a domain is a DNS Security Threat, then it MUST deny the transfer. This is to prevent registrars from pushing clear DNS Security
Threats somewhere else.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">Owen said that would prevent registrars from giving domains to brandowners who ask for them. But I am not aware that registrars actually do that. Would any other registrar rep confirm that happens?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">Crystal raises the better point that it would prevent pushing domains to the Registrar of Last Resort or similar. But that could be easily carved out, something like this...<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:11.0pt">Registrar MAY NACK a request if it has "Evidence of (a) <span class="gmail-il">fraud</span> or (b) the domain presents an active DNS Security Threat
as defined here: <a href="https://protect-us.mimecast.com/s/eRiTCOYzm8C5vyyIEgYBU?domain=icann.org" target="_blank">https://www.icann.org/dns-security-threat</a>."</span></b><span style="font-size:11.0pt"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:11.0pt">Registrar MUST NACK. request if it has "Clear and convincing evidence that the domain presents an active DNS Security Threat as defined here: <a href="https://protect-us.mimecast.com/s/eRiTCOYzm8C5vyyIEgYBU?domain=icann.org" target="_blank">https://www.icann.org/dns-security-threat</a>.
In such cases, the registrar MAY transfer the name to the Registrar of Last Resort [defined here, to include similar things]"</span></b><span style="font-size:11.0pt"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt">I do not see how it could be defensible to transfer out a name to any other registrar under such circumstances. But I look forward to any arguments otherwise.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">Mike<o:p></o:p></span></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif"><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr style="height:20.25pt">
<td rowspan="4" style="border:none;border-right:solid #00853D 1.0pt;padding:5.0pt 5.0pt 5.0pt 5.0pt;height:20.25pt;overflow:hidden">
<p align="center" style="margin:0in;text-align:center"><span style="font-family:"Arial",sans-serif;color:black;border:none windowtext 1.0pt;padding:0in"><img border="0" width="159" height="95" style="width:1.6562in;height:.9895in" id="_x0000_i1025" src="https://lh4.googleusercontent.com/S_Oxvn9Vep0rF8IVyiOnDwA4LymtHrWirggIxlsU26JihhEYDv5A5D03ZY0k_npND2t8xfiWCdTM5NTO_LSZMksjO_UlJm5IAP3FEi5cw96AwIPgVzvoOfHIux_qNA26n5UuxvQZ" alt="Logo"></span><o:p></o:p></p>
</td>
<td colspan="2" valign="top" style="border:none;padding:5.0pt 5.0pt 5.0pt 5.0pt;height:20.25pt;overflow:hidden">
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.05in">
<b><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#00853D">Mike Rodenbaugh</span></b><o:p></o:p></p>
</td>
</tr>
<tr style="height:.25in">
<td valign="top" style="padding:5.0pt 5.0pt 5.0pt 5.0pt;height:.25in;overflow:hidden">
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.05in">
<b><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#00853D">address:</span></b><o:p></o:p></p>
</td>
<td valign="top" style="padding:5.0pt 5.0pt 5.0pt 5.0pt;height:.25in;overflow:hidden">
<p style="margin:0in"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:black">548 Market Street, Box 55819</span><o:p></o:p></p>
<p style="margin:0in"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:black">San Francisco, CA 94104</span><o:p></o:p></p>
</td>
</tr>
<tr style="height:12.75pt">
<td valign="top" style="padding:5.0pt 5.0pt 5.0pt 5.0pt;height:12.75pt;overflow:hidden">
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.05in">
<b><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#00853D">email:</span></b><o:p></o:p></p>
</td>
<td valign="top" style="padding:5.0pt 5.0pt 5.0pt 5.0pt;height:12.75pt;overflow:hidden">
<p style="margin:0in"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:black"><a href="mailto:mike@rodenbaugh.com" target="_blank">mike@rodenbaugh.com</a></span><o:p></o:p></p>
</td>
</tr>
<tr style="height:24.0pt">
<td valign="top" style="padding:5.0pt 5.0pt 5.0pt 5.0pt;height:24.0pt;overflow:hidden">
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.05in">
<b><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#00853D">phone:</span></b><o:p></o:p></p>
</td>
<td valign="top" style="padding:5.0pt 5.0pt 5.0pt 5.0pt;height:24.0pt;overflow:hidden">
<p style="margin:0in"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:black">+1 (415) 738-8087</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">On Tue, Dec 6, 2022 at 9:43 AM Sarah Wyld <<a href="mailto:swyld@tucows.com">swyld@tucows.com</a>> wrote:<o:p></o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">Hello team,<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">A smaller group remained on the call after the main team wrapped up today to discuss how to adjust the 'evidence of fraud' reason for
a registrar to NACK a transfer out.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">The updated text that we propose to be used in this area is:<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-CA" style="font-size:11.0pt">"Evidence of (a) fraud or (b) the domain presents an active DNS Security Threat as defined here:
<a href="https://protect-us.mimecast.com/s/eRiTCOYzm8C5vyyIEgYBU?domain=icann.org" target="_blank">
https://www.icann.org/dns-security-threat</a>." </span></b><span lang="EN-CA" style="font-size:11.0pt"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">We wanted to balance two things:<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">1. Registrars must be able to NACK transfers out in appropriate circumstances, such as when the RNH is using the domain for something
illegal or that threatens the healthy functioning of the DNS. <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">2. Registrants need predictability (e.g. avoiding situations where a registrar changes the relevant agreement in a sudden or surprising
manner), and freedom of choice for their provider.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">We considered referring to DNS Abuse, but with the awareness that ICANN has defined "DNS Security Threat" at the link mentioned above,
and since the 5 categories of harm are essentially the same (compared to the DNS Abuse Framework), we decided to go with "DNS Security Threat".
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">We also considered that there should be evidence of such a threat, and that it should be active as opposed to resolved (e.g. a domain
that was compromised and used for abuse, but has since been restored to appropriate usage).
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">We hope that this proposed language will be acceptable to the broader team, and look forward to feedback. I would particularly like to
know if the (a) and (b) structure makes it clear that evidence is required in both cases (fraud or security threat).
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-size:11.0pt">Thanks,
<o:p></o:p></span></p>
<pre><span lang="EN-CA"> <o:p></o:p></span></pre>
<pre><span lang="EN-CA" style="font-family:"Verdana",sans-serif">-- </span><span lang="EN-CA"><o:p></o:p></span></pre>
<pre><b><span lang="EN-CA" style="font-family:"Verdana",sans-serif">Sarah Wyld</span></b><span lang="EN-CA" style="font-family:"Verdana",sans-serif">, CIPP/E</span><span lang="EN-CA"><o:p></o:p></span></pre>
<pre><span lang="EN-CA" style="font-family:"Verdana",sans-serif"> </span><span lang="EN-CA"><o:p></o:p></span></pre>
<pre><span lang="EN-CA" style="font-family:"Verdana",sans-serif">Policy & Privacy Manager</span><span lang="EN-CA"><o:p></o:p></span></pre>
<pre><span lang="EN-CA" style="font-family:"Verdana",sans-serif">Pronouns: she/they</span><span lang="EN-CA"><o:p></o:p></span></pre>
<pre><span lang="EN-CA" style="font-family:"Verdana",sans-serif"> </span><span lang="EN-CA"><o:p></o:p></span></pre>
<pre><span lang="EN-CA"><a href="mailto:swyld@tucows.com" target="_blank"><span style="font-family:"Verdana",sans-serif">swyld@tucows.com</span></a></span><span lang="EN-CA" style="font-family:"Verdana",sans-serif"> </span><span lang="EN-CA"><o:p></o:p></span></pre>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-CA" style="font-family:"Courier New""> </span><span lang="EN-CA" style="font-size:11.0pt"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt">_______________________________________________<br>
GNSO-TPR mailing list<br>
<a href="mailto:GNSO-TPR@icann.org" target="_blank">GNSO-TPR@icann.org</a><br>
<a href="https://protect-us.mimecast.com/s/km5kCPNAnQSv3kkH09pR0?domain=mm.icann.org" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-tpr</a><o:p></o:p></span></p>
</div>
</blockquote>
</div>
</div>
</body>
</html>