Good observation, George, and good idea for a solution.

Josh

on 7/19/07 8:43 AM, George Kirikos at [EMAIL PROTECTED] wrote:

> Hello,
> 
> I've noticed that when domain names are transferred into Tucows/OpenSRS
> from another registrar, the EPP "authinfo" code stays the same as what
> it was when the domain was at the losing registrar. This seems
> undesirable from a security standpoint, having someone other than
> Tucows know what the EPP code is, so after every transfer I have been:
> 
> 1) logging into the RWI to unlock the domain
> 2) logging into the "Manage" interface to change the code via the
> "Domain Extras" tab
> 3) re-locking the domain through the RWI
> 
> It would be nice if there was a setting in the RWI to automatically
> randomize the authinfo value upon a successful transfer into Tucows
> (just like the authinfo code is randomized for a brand new domain name
> registration). It could be done either through a global setting, or an
> extra checkbox in the "Transfer a Domain" page (just like the "Auto
> Renew" or "Lock Domain" or "Enable Parked Pages" yes/no options).
> 
> Sincerely,
> 
> George Kirikos
> http://www.kirikos.com/
> _______________________________________________
> domains-gen mailing list
> [email protected]
> http://discuss.tucows.com/mailman/listinfo/domains-gen

_______________________________________________
domains-gen mailing list
[email protected]
http://discuss.tucows.com/mailman/listinfo/domains-gen

Reply via email to