4 ms·
It would be helpful if you would share the name of the registrar so that other people could be aware that this policy exists if you work with that registrar.
by SOLAR_FIELDS 1y ago
It would be helpful if you would share the name of the registrar so that other people could be aware that this policy exists if you work with that registrar.
- theallan 1y agoJoker.com. Credit to them they fixed it reasonably quickly, but its a horrible policy to default to enact the change if no response if given. Their reasoning was what else would they do if someone got locked out of their email - they need a way to recover their domain somehow, and they ask for ID to be submitted, but as seen, that is trivial to fake.
- jpalomaki 1y agoThe only real solution is to tie the accounts to the digital identity of a person/company and enforce strong authentication for these cases. Not sure if there's already some EU level solution to this. This is of course pretty complicated to implement, but it would be a valuable extra service for customers.