Hello,

I've noticed that when domain names are transferred into Tucows/OpenSRS
from another registrar, the EPP "authinfo" code stays the same as what
it was when the domain was at the losing registrar. This seems
undesirable from a security standpoint, having someone other than
Tucows know what the EPP code is, so after every transfer I have been:

1) logging into the RWI to unlock the domain
2) logging into the "Manage" interface to change the code via the
"Domain Extras" tab
3) re-locking the domain through the RWI

It would be nice if there was a setting in the RWI to automatically
randomize the authinfo value upon a successful transfer into Tucows
(just like the authinfo code is randomized for a brand new domain name
registration). It could be done either through a global setting, or an
extra checkbox in the "Transfer a Domain" page (just like the "Auto
Renew" or "Lock Domain" or "Enable Parked Pages" yes/no options).

Sincerely,

George Kirikos
http://www.kirikos.com/
_______________________________________________
domains-gen mailing list
[email protected]
http://discuss.tucows.com/mailman/listinfo/domains-gen

Reply via email to