Dear Sirs, I would like to thank for all the comments and suggestions and would like to summarize it in one email. I believe that this solution will already be accepted. Of course, we will inform you about the implementation of the changes in time and we will first deploy them in the test environment, as usual. *1. TTL setting* We will set the TTL for 14 days *2. Possibility to set AuthInfo by registrar* Yes, we will enable this within the "Update" object command. We will leave the strength of the password itself to each registrar, we assume that within their applications they determine the strength of the password themselves and it will be appropriate. After deployment, we will analyze the quality of the entered passwords and if it turns out to be unsatisfactory, we will return to setting the password quality. At the same time, we will publish the restrictions which are used for generating passwords by CZ.NIC.We will send the sent AuthInfo and insert it into the system with the appropriate TTL. We will not send password information as such to the owner of the object, it is up to the registrar. *3. AuthInfo authentication by registrar* Yes, we will implement so that if (any) registrar sends AuthInfo as part of the "info" query (for any object) then if AuthInfo is correct, the object data is returned, if AuthInfo is bad (or ungenerated) an error 2202 - Invalid authorization information - is returned. *4. Send a hash if AuthInfo exists* We will not implement this - the password hash will be salted, so the password cannot be verified from it, in addition it will be done via the "Info" command *5. Regeneration of AuthInfo after info query* We will not perform it - it would not make sense if we want to enable password verification via Info query, its preservation will allow two operations of data acquisition - transfer under one AuthInfo and security is solved by TTL We will adjust the relevant document describing the changes according to the modifications listed here. Thank you and kind regards Marketa Kusickova -- Markéta Kušičková CZ.NIC, z.s.p.o. Milešovská 5 130 00 Praha 3 M +420 603 826 732 Dne 05. 04. 22 v 19:59 Markéta Kušičková napsal(a):