Contact information disclosure¶
Disclosure of contact details must be configured in both the back end (fred-rifd) and the front end (Apache module mod-eppd).
mod-eppd
EPPdataCollectionPolicyAccess
– sets the general approach and implies
the logic for contact preference requests (create
/update
) and display
(info
):
all
– the general approach is “Registry shows information”, registrars shall useflag='0'
to signal contact preference to hide listed attributes,none
– the general approach is “Registry hides information”, registrars shall useflag='1'
to signal contact preference to show listed attributes.
EPPcontactOperationDiscloseflags
lists names of the elements that
can be used in the disclose element of the corresponding operation.
Important
The *Discloseflags
lists must allow the same elements
that are allowed in the XSD schemas!
fred-rifd
contact_data_filter
– a method of enforcing server’s disclosure policy:
set_unused_discloseflags
– sets disclosure of attributes, for which there was no preference, to the configured defaults unconditionallycznic_specific
– controls conditional disclosure of address (see Hiding address), sets other disclosure settings, for which there was no preference, to the configured defaults unconditionally
The Registry operator may develop and assign custom methods.
Default disclosure settings default_disclose*
are listed for create
and
update
operations separately. If the attribute’s disclosure cannot be set
in an operation, it must have a default setting listed here.
Specify the share policy by using preset or by selecting specific groups of relationship.
data_share_policy
– set up preset policy with regard to the contact data shared between registrarsshow_all
– allow access to all registrars (default settings)cznic_specific
– hide attributes independently on the disclosure to the “other” registrar relationship
show_private_data_to
– specify one or multiple groups of registrar’s relationshipadmin_contact
– a sponsoring registrar of domain with the contact in the “administrative contact of a domain” roleauthorized_registrar
– a registrar informed about AuthInfo passworddomain_holder
– a sponsoring registrar of domain with the contact in the “holder” rolesponsoring_registrar
– a sponsoring registrar of contactsystem_registrar
– a registrar marked as the “system registrar”
other
– all other relationships
Example configurations¶
Pre-GDPR configuration with the CZ-specific filter (as in version 2.36)
EPPdataCollectionPolicyAccess all
EPPcontactCreateDiscloseflags telephone fax email vat ident notifyemail
EPPcontactUpdateDiscloseflags address telephone fax email vat ident notifyemail
EPPcontactInfoDiscloseflags address telephone fax email vat ident notifyemail
[rifd]
contact_data_filter = cznic_specific
[rifd::cznic_specific::create_contact]
default_disclosename = show
default_discloseorganization = show
default_discloseaddress = show
[rifd::cznic_specific::update_contact]
default_disclosename = show
default_discloseorganization = show
GDPR-compliant configuration with the CZ-specific filter (as in version 2.37 and newer)
EPPdataCollectionPolicyAccess none
EPPcontactCreateDiscloseflags telephone fax email vat ident notifyemail
EPPcontactUpdateDiscloseflags address telephone fax email vat ident notifyemail
EPPcontactInfoDiscloseflags address telephone fax email vat ident notifyemail
[rifd]
contact_data_filter = cznic_specific
[rifd::cznic_specific::create_contact]
default_disclosename = show
default_discloseorganization = show
default_discloseaddress = show
[rifd::cznic_specific::update_contact]
default_disclosename = show
default_discloseorganization = show
GDPR-compliant configuration with the CZ-specific filter (as in version 2.43 and newer)
[rifd::info_contact]
data_share_policy = show_all
GDPR-compliant configuration without the CZ-specific filter
EPPdataCollectionPolicyAccess none
EPPcontactCreateDiscloseflags telephone fax email vat ident notifyemail
EPPcontactUpdateDiscloseflags address telephone fax email vat ident notifyemail
EPPcontactInfoDiscloseflags address telephone fax email vat ident notifyemail
[rifd]
contact_data_filter = set_unused_discloseflags
[rifd::set_unused_discloseflags::create_contact]
default_disclosename = show
default_discloseorganization = show
default_discloseaddress = show
[rifd::set_unused_discloseflags::update_contact]
default_disclosename = show
default_discloseorganization = show
# This configuration is by default. In case this setting section is missing, set up the following settings below.
[rifd::info_contact]
data_share_policy = show_all