AWS Route53: Route53: clarify transfer authorization email senders and cancellation
Summary
Reworded the ICANN authorization requirement from 'we must cancel the request' to 'we may cancel the change request', and expanded the list of legitimate authorization email sender addresses for .com.au/.net.au and other TLDs to include [email protected].
Security assessment
The change documents the legitimate sender addresses for domain-transfer authorization emails, which helps registrants recognize genuine authorization requests versus spoofed/phishing messages, and softens the stated cancellation consequence. It is security-adjacent guidance rather than a fix for a specific vulnerability.
Evidence
+ * [email protected]
Diff
diff --git a/Route53/latest/DeveloperGuide/domain-transfer-to-route-53.md b/Route53/latest/DeveloperGuide/domain-transfer-to-route-53.md index a017d539f..55b187929 100644 --- a//Route53/latest/DeveloperGuide/domain-transfer-to-route-53.md +++ b//Route53/latest/DeveloperGuide/domain-transfer-to-route-53.md @@ -599 +599 @@ For some TLDs, if you change the email address for the registrant contact, we se -For changes to the domain owner or the email address for the registrant contact, if we don't receive authorization for the change within 3-15 days, depending on the top-level domain, we must cancel the request as required by ICANN. +For changes to the domain owner or the email address for the registrant contact, if we don't receive authorization for the change within 3-15 days, depending on the top-level domain, we may cancel the change request. @@ -607 +607,6 @@ TLDs | Email address that authorization email comes from -.com.au and .net.au | [email protected] The email contains a link to http://transfers.ispapi.net. +.com.au and .net.au | One of the following email addresses: + + * [email protected] (contains a link to http://transfers.ispapi.net) + * [email protected] + + @@ -613,0 +619 @@ All others | One of the following email addresses: + * [email protected]