[Servercert-wg] Ballot SC14 version 3: Updated Phone Validation Methods

[Wayne Thayer]

On Tue, Jan 15, 2019 at 11:57 AM Doug Beattie <doug.beattie at globalsign.com>
wrote:

> Wayne,
>
>
>
> This was discussed a little on the Validation Summit Google Docs page
> where there was a recommendation: Don’t permit phone transfers except to a
> Domain Contact.  So, we added in the clause: “In the event that someone
> other than a Domain Contact is reached, the CA MAY request to be
> transferred to the Domain Contact”
>
>
>
> *Domain Contact: *The Domain Name Registrant, technical contact, or
> administrative contract (or the equivalent under a ccTLD) as listed in the
> WHOIS record of the Base Domain Name or in a DNS SOA record, or as obtained
> through direct contact with the Domain Name Registrar.
>
>
>
> If we permit phone transfers to a Domain Contact, then it seems like the
> CA needs to know they are being transferred to a Domain Contact (and not
> the maintenance department). I recall a discussion about this when we first
> discussed this (don’t get transferred to the Maintenance Department for
> domain approval).
>
>
>
> We can certainly leave the details of knowing they are being transferred
> to a Domain Contact up to individual CA policies and procedures and take
> this out, I’m fine with that.  It just seemed “logical” to say you can only
> be transferred to a “Domain Contact” if something more than the phone
> number was supplied as part of the Domain Contact data record.
>
>
>
> I’ll plan to go ahead and remove this unless I receive any other feedback.
>
>
> Thanks Doug, I don't have any suggestions that would clarify this new
language, so I would like this to be reverted.

- Wayne
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190116/e55179db/attachment.html>