Transfer-Out Still Possible Even With Registrar-Lock!?

[Domagon]

I learn something new everyday in this business ... it appears registrar transfer-out IS possible even with Registrar-Lock under the new EPP scheme.

According to RegistrationTek, this domain would transfer-out ok, since EPP status is authoritative (EPP status of "clientTransferProhibited" would need to be indicated to prevent transfer-out) ...

Well anyways, the transfer was submitted yesterday, and the registry accepted it and is now in the 5 day pending approval period.

So in a nutshell, it appears transfer-outs on a "locked" domain is possible unless the EPP status of "clientTransferProhibited" is also indicated.

Domain Name: CYBERLOCATIONS.COM
Registrar: REGISTRATION TECHNOLOGIES, INC.
Whois Server: whois.registrationtek.com
Referral URL: http://www.registrationtek.com
Name Server: NS2.DOMAGON.NET
Name Server: NS1.DOMAGON.NET
Status: REGISTRAR-LOCK
EPP Status: clientDeleteProhibited
Updated Date: 03-Nov-2006
Creation Date: 13-May-2003
Expiration Date: 13-May-2007

On a related note, I tried transferring this domain into BulkRegister, and they responded with a machine written boilerplate reply; they've done likewise in the past for other issues - outsourcing support saves money in the shortrun, but longterm is often more costly ... definitely looking at transferring out my 1170+ domains from there to other registrars shortly unless BulkRegister / Enom dramatically change their support procedures.

Ron

 

[Theo]

The only other quirk I am aware of is that the gaining registrar - and that was prior to the EPP addition - need not send an email notifying the registrant of the move. So that leaves a window for malice.

 

[Steen]

ICANN Registrar: ENOM, INC.
Created: 1995-10-27
Expires: 2009-10-26
Registrar Status: clientDeleteProhibit
Whois Server: whois.enom.com

Would this also be able to leave if the correct EPP was provided?

 

[chording]

Instead of just having one lock, i.e. "Registrar Lock" under the RRP (old protocol), domains now have finer grained locks under EPP (new protocol), there're 4 locks, namely:

clientDeleteProhibited
clientRenewProhibited
clientTransferProhibited
clientUpdateProhibited

If clientTransferProhibited is absent from the EPP status, it means that there is no transfer-lock in place. Hence, transfer-out is possible.