Decisions made in connection with the development of a new registry system (2007-2010)

A holder always has the right to change from one registrar to another. For the holder it is important that a change of registrar is done in a secure way. It is also important that there is no doubt about when the responsibility is moved from the old to the new registrar. At the same time it must be possible to change registrar quickly and easily.

Draupne will offer several levels of security. The easiest method is based on today's solution where domains are not protected and a new registrar can transfer the domain to himself on behalf of the holder. Holders who wish to protect their domain against transfers can request that an authentication code is put on the domain. This authentication code is called AuthInfo-code in EPP. The holder must be registered with an email address and a mobile phone number to be able use an authentication code. Depending on whether a domain has a code and if the code is available, a transfer can occur in three ways:

Change of registrar for domains without an authentication code

Any registrar can transfer the domain to a new registrar on behalf of the holder by submitting an EPP request to Norid. This is the same transfer model as in today's system.

Change of registrar for domains with an authentication code

The holder asks a registrar to transfer the domain giving him the authentication code. The registrar submits an EPP request with the code to Norid.

If the registrar submits a request without the authentication code on such a domain, for instance because the holder cannot find the code, the holder will receive a one-time token. He then has to send the code to the new registrar who submits a new EPP request to Norid with the one-time token.

Change of registrar for locked domains

Holders of domains they consider to be of critical importance, can secure their domains further by asking Norid to lock the domain. As long as the domain is locked, all requests for transfer to a new registrar will be denied.

The holder must contact Norid directly and confirm their identity and company authorization to lock and unlock the domain.

Holders who want to lock their domain will have to pay for this service, and it will take some time to unlock the domain and transfer it to a new registrar.

Draupne will use EPP - Extensible Provisioning Protocol - for communication between the registrars and Norid. This is a protocol developed especially for registry/registrar communication, and gives much better opportunities for automatization at both ends than today's email solution. The introduction of EPP increases the possibilities for automatization, but it also places a greater responsibility on the registrars.

This decision means that email will disappear as a communication channel in the registration process.

Norid primary expects the registrars to provide their own EPP software. However, during a one year transitional period Norid will offer a simple web based EPP client. The source code for this client will be published. We will also offer an Application Programming Interface (API) including the source code so that the registrars can develop their own solutions. Registrars should consider co-operating with other registrars about maintainance and development of software. There are some more or less complete EPP software available in the marked.

The Draupne data model resembles the one used in today's system where separate objekts are maintained for contact, nameserver and domain. The most important changes are:

• the registrar object will disappear as it is not supported by EPP. Maintainance of the registrar's own data will happen through the registrar web, which will be interactive
• only country codes, no country names
• first and last person names will be combined into one name
• the underlaying data model will be able to handle more types of registrants, not only Norwegian organizations
• persons can be affiliated with multiple organizations
• new field for mobile phone
• IP address only for .no nameservers
• support for IPv6 addresses
• tech-c and zone-c are combined into a joint tech-c

The registrar web will be more important for both information and communication. It will be updated more often and will get interactive functionality. The registrars will maintain their own data here.