Zone Transfer Policy Review Submission From: Steven Heath Received: 1 October 2003 1. Should any organisation outside of the registry company be permitted the .nz zone file? In the true use of the term zone file I think no. I can see only 3 major uses for the data in the zone file: A, to us in case of emergency if NZRS 'went off the air'. This is a NZRS/DNC issue for disaster recovery etc. B, For reasons for marketing/spamming and related things not in the best interests of .nz registrants. C, For statistical purposes. Looking at these 3 reasons the only reason which is valid in the last. In this case all the details in the zone files are not needed, such as IP address of the entries name server. Most, if not all, of the requirements is the changes from day to day, month to month, year to year etc of the total zone as well as the 2LD's. In this case why doesn't DNC/NZRS provided a modified file with just the actual domain names in it and remove ALL other details? 2. If organisations are permitted to obtain a copy of the .nz zone file, what criteria should be in place to assess whether their use of the zone file is appropriate? Written agreement with terms and conditions of usage set out. Also finite limit on each application for, say 12 months, at the end of which another application would be required. 3. Should authorised registrars automatically be able to receive a copy of the .nz zone file? No. 4. How frequently should copies of the .nz zone file be available to any approved organisations? No more often than weekly. 5. What information, if any, should any party receiving the .nz zone file be able to make public? Patterns of 2LD growth, general stats. Not things like which name servers are responding to which names (ie 10 name servers are authoritative for 58% of all names). 6. Does the release of the .nz zone file have a negative impact on the security of the information held? It could do. Depends if ICANN has a copy :-) Steven Heath