RE: Security vs. Authorization

["Hollenbeck, Scott" <shollenbeck@verisign.com>]

Bill and I have exchanged some private messages about his thought.  I have
some concerns about how difficult it could be address the business and/or
legal aspects involved, and Bill believes that the technical considerations
on ensuring data integrity are fair game for provreg.  Does anyone have any
views of their own that they'd like to express?

<Scott/>

> -----Original Message-----
> From: Bill Manning [mailto:bmanning@ISI.EDU]
> Sent: Wednesday, January 10, 2001 11:44 AM
> To: shollenbeck@verisign.com
> Cc: Olivier.Guillard@nic.fr; ietf-provreg@cafax.se
> Subject: Re: Security vs. Authorization
> 
> 
> % > Are you sure that the registrar is the only one entitle do 
> % > performe any
> % > change?
> % 
> % There should be only one registrar authorized to change an 
> object, but they
> % should do so either on behalf of a registrant or pursuant 
> to whatever legal
> % arrangement exists between registrar and registrant.
> % 
> % <Scott/>
> 
> 	I think that this might be problematic.  There should be a 
> 	method to allow "override" in the event the single authorized
> 	registrar is unwilling/unable to make the change.