Subject: [eppext] draft-wallstrom-epp-registrant-problem-statement-00.txt

From: Patrik Wallström <[email-masked]>
Date: Mon, 20 Jan 2014 22:44:31 +0100

I just realised that it took such a long time finishing this text to not read up on the provreg mailing list and just now figured out that there was both a new working group and a new mailing list. However, I have been looking at the registry lock issues, and think this alternative can be of some interest.

Name:		draft-wallstrom-epp-registrant-problem-statement
Revision:	00
Title:		EPP Registrant Security Problem Statement
Document date:	2014-01-20
Group:		Individual Submission
Pages:		6
URL:            http://www.ietf.org/internet-drafts/draft-wallstrom-epp-registrant-problem-statement-00.txt
Status:         https://datatracker.ietf.org/doc/draft-wallstrom-epp-registrant-problem-statement/
Htmlized:       http://tools.ietf.org/html/draft-wallstrom-epp-registrant-problem-statement-00

Abstract:
  This document collects a number of requirements on securing the
  provisioning of DNS data between a Registrant and a Registry.  The
  most common attack in the chain of Registrant-Registrar-Registry is
  to inject false information into the Registrar system, which in turn
  forwards the injected data to the Registry using EPP, the Extensible
  Provisioning Protocol.