Re: 3.4.9 [4]

[Peter Eisenhauer <eisenhauer@schlund.de>]

On Tue, Apr 10, 2001 at 08:20:07AM -0400, Eric Brunner-Williams in Portland Maine wrote:
> > This particular wording was requested by Eric Brunner-Williams.  Eric, would
> > you care to clarify, please?
> 
> Sure. Here is the excerpt from my original (off-list) note to the author of
> -06 (now -01) on February 8th:
> 
> : 3.11 Object Information Query
> : 
> :      The return values of an information query (FQDN, NS, RegId) is detailed
> :      and the query mechanism is registrar indifferent, except that the most
> :      recent authorization identifier return is registrar specific, and any
> :      extension of registry specific semantics is on an opt-in basis by the
> :      incumbant registrar.
> : 
> :      Please invert the optional registry specific semantic extension so that
> :      opt-out is the default, e.g., s/limited to/granted by/.
> : 
> :      [4] Requests to retrieve information describing a registered object
> :      MAY be _granted_by_ the registrar that currently sponsors the registered
> :      object.
> 
> In case memories aren't perfect (and mine usually isn't, at least about other
> people's issues), the -06 draft had default opt-in disclosure semantics on
> queries, as the registrar may LIMIT, as opposed to default opt-out, where the
> registrar may GRANT.
> 
> Here is the resulting text in -00, then -01, in 3.4.9 [4]
> 
> >"Requests to retrieve information describing a registered object
> > MAY be granted by the registrar that currently sponsors the registered
> > object."
> 
> Peter's suggested modification (below) allows the registry to modify the
> recipients of registrant-originated data, and to modify the recipients of
> registrar-sponsored data (usually equivalent datums).
> 
> "... MAY be granted by the registrar that currently sponsors the registered
>  object or MAY be granted by registry policy."
> 
> I'd like to know what the motivating use cases are, as I don't know what
> Peter ment in his motivational comment by "the (registry public) retrievel".
> I trust we're not revisiting the whois:43 and/or whois:xx question, as that
> is out of scope for the R* protocol.
> 
> I await further clarification.

I meant access by all other authorized users of the registry when I wrote
"registry public", so this is no public access or whois issue.

The question is: If a registry wants to regulate access to information by its
own policy, can this done using the current version of the specification?

It is only mentioned that the current sponsoring registrar MAY grant rights to
retrieve information on an object -- however the registry itself is not
mentioned.

> 
> Eric

Best Regards,
Peter Eisenhauer

-- 
Peter Eisenhauer                        Schlund + Partner AG
Erbprinzenstrasse 4-12                  Tel: 0721/91374-0
76133 Karlsruhe                         E-Mail: eisenhauer@schlund.de