1. Proposal to Deprecate MAIL-FROM in Maintainer Object
Database SIG
APNIC 14, Kitakyushu, Japan
4 September 2002

2. Proposal Deprecate the MAIL-FROM authentication in APNIC Whois DB
Affected MAIL-FROM objects replaced with CRYPT-PW generated by APNIC

3. Current Authentication
NONE
No protection
MAIL-FROM
Very weak protection
CRYPT-PW
Unix encrypted password
PGP-KEY
Public key algorithm protection

4. Motivation MAIL-FROM is not secure
Stronger authentication now available
PGP introduced with whois v3
MD5 soon available
MAIL-FROM authentication deprecated in RIPE database

5. Objects Affected Current statistics MAIL-FROM: 183 Objects
mntner: MAINT-AP-ISPNET
descr: ISPNET Maintainer
country: TH
admin-c: JT12-AP
tech-c: KO110-AP
upd-to:
mnt-nfy:
auth: MAIL-FROM
notify:
mnt-by: MAINT-AP-ISPNET
referral-by: MAINT-AP-ISPNETADMIN
changed:
source: APNIC

6. Implementation Proposed Timeline
30 Sept 2002: Public announcement & mails to contacts of affected maintainers
30 Oct 2002: 1st reminders
30 Nov 2002: 2nd reminders
17 Dec 2002: cutover
Affected MAIL-FROM objects replaced with CRYPT-PW generated by APNIC

7. Discussion
Consensus from DB SIG to proceed with this proposal?