<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Oct 24, 2017, at 3:46 PM, Geoff Keating <<a href="mailto:geoffk@apple.com" class="">geoffk@apple.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><br class=""><br class=""><blockquote type="cite" class="">On 24 Oct 2017, at 2:58 pm, Peter Bowen via Public <<a href="mailto:public@cabforum.org" class="">public@cabforum.org</a>> wrote:<br class=""><br class="">As ballot 190 is complete and fully effective, it seems like a reasonable time to start considering further validation method. Amazon proposes the following new method. As far as I know, this does not overlap with any of the existing methods.<br class=""><br class="">3.2.2.4.12 Registrar challenge validation<br class="">Confirming the Applicant’s control over the request Domain Name by confirming the presence of a Random Value or Request Token in a response from the Domain Name Registrar or Registry received in response to a request containing an Authorization Domain Name.<br class=""></blockquote><br class="">I like the concept, but can we be a bit more specific than just ‘in response to a request’? For example, can we say ‘in response to a WHOIS request for the Authorization Domain Name’?</div></div></blockquote><br class=""></div><div>I was trying to stay fairly generic because some registries, such as Núcleo de Informação e Coordenação do Ponto BR, CZ.NIC, z. s. p. o., and Dirección Nacional del Registro de Dominios de Internet, the registries for .br, .cz, and .ar, are using RDAP now (see <a href="https://data.iana.org/rdap/dns.json" class="">https://data.iana.org/rdap/dns.json</a> for the current list). Additionally, as you may be aware some registries do not have RDAP or Whois servers, so one could imagine that some registries might even be open to implementing an API that could be used for validation.</div><div><br class=""></div><div>Thanks,</div><div>Peter</div><br class=""></body></html>