Discuss mailing list

[Jeff Taylor <shdwdrgn AT sourpuss.net>]

I guess I just don't understand WHY this is even an issue?  There's 
never been any attempts to hack into the existing opennic domains, and 
unless we became an actual world-wide competitor with ICANN, there would 
be no reason to expect anyone to put that much effort into obtaining 
opennic domains.  In addition, I have never seen an ICANN registrar that 
required anything more than a simple username (or customer number) and 
password to log in.

So why is there so much interest over trying to make logins more difficult?

At most, I could see adding an email confirmation if the NS or A records 
for the domain name are changed, and possibly some limitation in not 
allowing these records to change if your user account has been updated 
within the last 24 hours (to prevent someone from changing your email 
before they try to modify the domain).