Bluetrait

The ICANN (Internet Corporation For Assigned Names and Numbers), the people that handle many of the domain registrations (including .com and .net) have decided to change their domain transfer policy. The new system is absolutely crazy.

A domain transfer is when you change from one company that handles your domain to another. So for most of my domains I run through joker.com, although there are many others.

The new policy allows for much, much easier domains transfers. This is a bad thing. The following is taken from the new policy:

Failure by the Registrar of Record to respond within five (5) calendar days to a notification from the Registry regarding a transfer request will result in a default "approval" of the transfer.

In the event that a Transfer Contact listed in the Whois has not confirmed their request to transfer with the Registrar of Record and the Registrar of Record has not explicitly denied the transfer request, the default action will be that the Registrar of Record must allow the transfer to proceed.

http://www.icann.org/transfers/policy-12jul04.htm

Pretty crazy stuff. Luckily many domain registrars provide domain locking, which blocks this attempt. I received an email from joker the other day about it.

Joker.com introduces Feature "Domain Protection"

The protection of domain name ("domain locking") provides an additional layer of security against unauthorized domain manipulation. It also prevents from fraudulent transfers.

This feature keeps you safe from the notorious people known as domain hijackers. They often spot nice domain names to generate profit from.

Joker.com will secure your domains - which you are the "owner" of - on November, 10th 2004.
If you decide you do need to unlock your domain (needed to transfer a domain to another registrar), simply log in to your account at Joker.com and remove the lock with the help of our 'Servicezone'.

This procedure conforms to the ICANN regulations which become active on November 12th, 2004.

So people watch your domains :|