Vote: Is the CIRA change to EPP an unmitigated disaster?

[msn]

We have gone from one central system supporting numerous agents, called registrars, to dozens of totally different systems, under different rules, and with varying degrees of success in making anything work.

In short, it is a mess, it is poorly thought out, it is badly designed and it is even more badly implemented.

Just one word - yes, it is a mess, or no, it's a go.

[whitebark]

yes.

And the disaster is still unfolding.

[Namefox]

I'm not impressed AT ALL. Actually, quite pissed at the mess it is in.

[fwdtech]

Sorry, but one word is insufficient.

Nonetheless, in response "YES"

I telephoned CIRA yesterday, and ran this scenario past the CSR (which actually is happening).

Previously, I could transfer away a domain that was suspended for 29 day, 23 hours, and 59 minutes, by paying for my order, logging into CIRA and clicking my consent.

DONE.

ABSOLUTELY NO INVOLVEMENT WITH THE LOSING REGISTRAR, which is the way it should be.

Now, I have a domain 8 days from suspension (and fortunately I started the process now, and not in 7 days), at a little registrar.

I asked yesterday for the EPP key - no reply as of yet.

I phone the CIRA CSR if this scenario is correct:

The registrar has FIVE DAYS to send you the EPP key.

With the key, you request a transfer. The transfer fails. You do not know why.

It turns out that the losing registrar has "locked" your domain without your knowledge, which prevents transfers.

CIRA has no policy on domain locking, nor on informing the registrant of domain locking, NOR OF TIMEFRAME FOR DOMAIN UNLOCKING.

CIRA has no policy on registrar responding to support inquiries.

At some point, you involve CIRA to order the domain unlocked.

NOW, you can request A NEW EPP Key (they are only valid for 5 days), and the registrar has a fresh FIVE DAYS to send you the EPP Key.

You calculate the time to get it transferred, never mind the insane amount of time and work to get your domain freed.

This is CIRA's idea of "improved customer experience", "now easier for Canadians to register and maintain their .CA domain names."

I have NEVER been more DISGUSTED with outright $&%$*&%.

[CanSpace]

Actually EPP keys have no validity period. They remain the same unless they are specifically changed for some reason.

Furthermore, registrars should not be locking domains on clients' behalfs. The locks are for clients and should be added/removed at the clients discretion.

Really it just sounds to me like it's more important to have a good registrar now. If your registrar provides your EPP codes online without having to manually 'request' it, and if your registrar allows you to lock/unlock the domain online also, none of the problems you mentioned would be an issue.

[Adam Dicker]

This new system stinks, I never thought I would miss the old system. ;(

SOME registrars are simply not aware of how to run the new system.

-=DCG=-

[fwdtech]

Actually EPP keys have no validity period. They remain the same unless they are specifically changed for some reason.

Would that mean that a person could acquire a domain, and that the person disposing of it could use the same key to acquire the domain back without consent?

[msn]

The registrar has FIVE DAYS to send you the EPP key.

Good grief! Who designed this system, old man Bob Parsons?

[DOTCA]

yes..yes..yes Honestly, the OLD system was 1000times better, even though it was a bit of a challenge to be authorizing a few times.. but the old system was transparent and no one seems to be knowing what's going on with the EPP..

[fwdtech]

Good grief! Who designed this system, old man Bob Parsons?

Nope, this was 100 % homegrown by Paul & Rob.

(At least Bob's has Lock/Unlock in the REGISTRANT'S Control Panel &
Bob's has Send Authorization Code in the REGISTRANT'S Control Panel.
A transfer between GoDaddy & WildWest is a matter of Unlock, wait for Code email, approve transfer - a few steps, but done in 5 minutes - NOT 15 DAYS)

[CanSpace]

Would that mean that a person could acquire a domain, and that the person disposing of it could use the same key to acquire the domain back without consent?

Correct. Which is why as a practice, when a domain is transferred to a new registrant or even a new registrar, the EPP code should be immediately changed. CIRA specifically mentions this is a best practice.

That being said, I would guess that most average registrars do NOT do this automatically.

Which brings back my point that now it's more important than ever to choose a good registrar.

[fwdtech]

Nope, this was 100 % homegrown by Paul & Rob.

Speaking of which, is there not irony that Rob's CFIT ( momentous.ca - pool.com )(Google CFIT vs Verisign) is acronym for Icann TRANSPARENCY - while they have driven CIRA's process into the greatest OBSCURITY possible.

I find Paul's laurels interesting - www.paul.ca

(One can read an interesting motivation from Rob here - https://st.icann.org/data/workspaces...Rob%20Hall.pdf , especially page 15, "RegistRAR Portfolios")

If this stuff doesn't merit independent review, I don't know what does.

[DOTCA]

EPP= Everything Poorly Planned

[thebutler]

If its not broken why fix it.

Seriously the old system worked and yes you had to log in but the system worked. The only problem I really hated was we couldn't push domains to another CIRA registered person. Is this system the "fix" to that problem? Sure but its caused some other problems.

The new one is open to abuse and CIRA will likely wait and wait until they "fix" it, so this thing is going to drag on until someone lawyers up with CIRA about some big screw up.

[DOTCA]

If its not broken why fix it.


The new one is open to abuse and CIRA will likely wait and wait until they "fix" it, so this thing is going to drag on until someone lawyers up with CIRA about some big screw up.

I am hearing class ... here..

[fwdtech]

I am hearing class ... here..

Already thought about here as well - the pathethic thing is - the only winner, as usual, the lawyers.

From where will CIRA's geniuses pay any legal costs - our pockets. And their directors are indemnified.

[msn]

Correct. Which is why as a practice, when a domain is transferred to a new registrant or even a new registrar, the EPP code should be immediately changed. CIRA specifically mentions this is a best practice.

That being said, I would guess that most average registrars do NOT do this automatically.

Which brings back my point that now it's more important than ever to choose a good registrar.

This is where webnames.ca gave our EPP code to another company and allowed them to change our domain, which is now in their possession.

And what does webnames.ca say? Tough nuts.

[fwdtech]

The registrar has FIVE DAYS to send you the EPP key.

Good grief! Who designed this system, old man Bob Parsons?

So, after waiting out the FIVE days, emailed CIRA. CIRA emails back:

"We'll email the registrar to contact you. If you don't hear from the registrar in the next TWO days, contact us again."

WOW! WOW! WOW!

(Instead of 15 days for transfers, expect 20-30 days. Nice streamlining!)

[hugegrowth]

I have only renewed domains since the change, which have gone well. I only use Sibername and Namespro, and have a few at GoDaddy.

If you catch a TBR domain at Sibername through one of their many registrars, when it comes time to renew it seems to automatically go to the home registrar now (which you used to have to approve through CIRA).

I haven't transferred a domain since the change. I am also wondering about the 30 day suspension period, and the registrar potentially adding on costs and more time for the expiration. I renew a lot of domains near the end of the 30 day suspension, so if there are changes to that I won't like it.

[Provider]

guys, what is the problem with the new system? I renewed few names without any problems. Just let me know what to expect when I transfer the names out