[FreeDNS] Domain modification completely insecure

["David Grant" <dgrant43@xxxxxxxxxxx>]

If you own a za.net or za.org domain please be aware that your domain 
contact details and nameserver records can be changed at any time by anyone.

The only "security check" that the modification system uses is to check that 
the email address in the "From:" field of the domain modify email matches 
the email listed in the domain whois technical contact.

Seeing as anyone can change the "From:" field of their email, and seeing as 
no acknowledgement reply is required for the domain modify request, anyone 
is able to change the domain records for any ZA NiC domain.

Whether or not this domain registry is free, this level of security is 
unacceptable. People are registering domains in good faith without the 
knowledge that your security procedures are entirely inadequate.

_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today! 
http://www.msn.co.uk/messenger

_____________________________________________________
FreeDNS                    ZA NiC - free domain names
freedns@xxxxxx    Archive: http://www.za.net/freedns/