<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:110175247;
mso-list-type:hybrid;
mso-list-template-ids:-356095628 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#467886" vlink="#96607D" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span lang=EN-GB>Hello NCSG Members<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>I seek input on one of the transfer policy recommendations, specifically regarding transfer restrictions after an inter-registrar transfer.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Background Summary:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>In its recommendation 18, the working group recommends requiring registrars to impose a transfer restriction of 30 days (expressed as 720 hours for clarity) following a transfer. In other words, if I transfer a domain to a new registrar, then I must wait for 720 hours before any further transfer can occur.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>So far so good, and most stakeholder groups seem to accept this restriction as an important security mechanism. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>The issue has to do with provisions within the recommendation that allow for lifting the restriction under certain conditions. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>The NCSG comments for this recommendation supported the transfer restriction as well as the ability to lift it but suggested that there be specific conditions under which the restriction can be lifted and out comment enumerated those conditions. The original recommendation text simply required that the “request includes a reasonable basis for removal of the restriction”. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>The NCSG, in its comment, noted that “reasonable request” was too vague to be of value (or words to that effect).<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Question:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><ol style='margin-top:0in' start=1 type=1><li class=MsoListParagraph style='margin-left:0in;mso-list:l0 level1 lfo1'><span lang=EN-GB>Is it useful in a policy document to enumerate specific conditions? <o:p></o:p></span></li></ol><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Some working group members suggest that enumerating conditions will limit the policy to those specific conditions, and therefore any additional ones may require a policy review. But others disagree, indicating that the conditions mentioned in the policy can serve as examples which provide guidance to compliance should there be a question as to whether the policy was applied correctly.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><ol style='margin-top:0in' start=2 type=1><li class=MsoListParagraph style='margin-left:0in;mso-list:l0 level1 lfo1'><span lang=EN-GB>Referring to the original and revised text below, my suggestion is to retain, in 18.3, at the very least points (i), (ii) and (v). Furthermore, condense points (iii) and (iv) into one that refers to issues regarding the acquisition of domain names. Do you (a) agree with my suggested proposed text, or (b) is there some other formulation or (c) do you believe the original text to be sufficient?<o:p></o:p></span></li></ol><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>The original and revised text is below. The crux of the issue is 18.3<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>I look forward to thoughts you may have.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Thanks<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Ken<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>INITIAL REPORT LANGUAGE<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>Recommendation #18 – Transfer Restriction After Inter-Registrar Transfer<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>The Registrar MUST restrict the RNH from transferring a domain name to a new Registrar within 30 calendar days / 720 hours of the completion of an inter-Registrar transfer. To the extent that a Registry and/or Registrar has an existing policy and/or practice of restricting the RNH from transferring a domain name to a new Registrar for a different period of time following an inter-Registrar transfer, all policies and practices MUST be updated to be consistent with this new requirement. However, the working group recognizes that there may be situations where early removal of the 30-day restriction described in Recommendation 18 is appropriate. Accordingly, the Registrar MAY remove the 30-day inter-Registrar transfer restriction early only if all of the below conditions are met:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>18.1: The Registrar MUST be able to demonstrate that it received a specific request to remove the 30-day restriction from the Registered Name Holder; <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>18.2: The Registrar MUST ensure the request to remove the restriction was requested by the Registered Name Holder;<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>18.3: The specific request includes a reasonable basis for removal of the restriction; and<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>18.4: The Registrar MUST maintain a record demonstrating the request to remove the restriction (regardless of outcome) for a period of no fewer than fifteen (15) months following the end of the Registrar’s sponsorship of the registration.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Revised Recommendation 18:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>The Registrar MUST restrict the RNH from transferring a domain name to a new Registrar for 720 hours from the completion of an inter-Registrar transfer. Accordingly, the Registrar MAY remove the 720-hour inter-Registrar transfer restriction early only if all of the below conditions are met:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>18.1: The Registrar MUST be able to demonstrate that it received a specific request to remove the 720-hour restriction from the Registered Name Holder;<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>18.2: The Registrar MUST ensure the request to remove the restriction was requested by the Registered Name Holder;<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>18.3: The specific request includes a reasonable basis for removal of the restriction, which [includes but is not] limited to [(i) well informed, documented, clearly intentional request by the registrant; (ii) mutual agreement between the prior and current Registrar of a transfer back to the prior Registrar;] (iii) legitimate circumstances surrounding an escrow intermediary affecting the completion of the acquisition of the involved registered domain name; (iv) to complete documented registered domain name acquisition (aftermarket purchase, portfolio consolidation, or bona fide purchase); (v) intentional release of the registered domain name that had transferred to the Registrar where it becomes evident the domain name use would be in violation of the Registrar’s Acceptable Use Policy (AuP), Terms of Service (ToS), or local law or other similar governance.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>18.4: The Registrar MUST maintain a record demonstrating the request to remove the restriction (regardless of outcome) for a period of no fewer than fifteen (15) months following the end of the Registrar’s sponsorship of the registration.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p></div></body></html>