VeriSign (VRSN)

2.6. Registrar’s Registration Agreement and Domain Name Dispute Policy.

Registrar shall have in effect an electronic or paper registration agreement with the Registered Name Holder. The initial form of Registrar’s registration agreement is attached as Exhibit A (which may contain multiple alternative forms of the registration agreement). Registrar may from time to time amend its form(s) of registration agreement or add alternative forms of registration agreement, provided a copy of the amended or alternative registration agreement is made available to VNDS in advance of the use of such amended registration agreement. Registrar shall include in its registration agreement those terms required by this Agreement and other terms that are consistent with Registrar’s obligations to VNDS under this Agreement. Registrar shall have developed and employ in its domain name registration business a domain name dispute policy, a copy of which is attached to this Agreement as Exhibit B (which may be amended from time to time by Registrar, provided a copy is made available to VNDS in advance of any such amendment).

2.7. Secure Connection. Registrar agrees to develop and employ in its domain name registration business all necessary technology and restrictions to ensure that its connection to the System is secure. All data exchanged between Registrar’s system and the System shall be protected to avoid unintended disclosure of information. Each RRP or EPP session shall be authenticated and encrypted using two-way secure socket layer (“SSL”) protocol. Registrar agrees to authenticate every RRP or EPP client connection with the System using both an X.509 server certificate issued by a commercial Certification Authority identified by the Registry and its Registrar password, which it shall disclose only to its employees with a need to know. Registrar agrees to notify Registry within four hours of learning that its Registrar password has been compromised in any way or if its server certificate has been revoked by the issuing Certification Authority or compromised in any way.

2.7.1 Authorization Codes. At such time as Registrar employs EPP, Registrar shall not provide identical Registrar-generated authorization <authinfo> codes for domain names registered by different registrants with the same Registrar. VNDS in its sole discretion may choose to modify <authinfo> codes for a given domain and shall notify the sponsoring registrar of such modifications via EPP compliant mechanisms (i.e. EPP<poll> or EPP<domain:Info>). Documentation of these mechanisms shall be made available to Registrar by VNDS. The Registrar shall provide the Registered Name Holder with timely access to the authorization code along with the ability to modify the authorization code. Registrar shall respond to any inquiry by a Registered Name Holder regarding access to and/or modification of an authorization code within ten (10) calendar days.

2.8. Domain Name Lookup Capability. Registrar agrees to employ in its domain name registration business VNDS’s registry domain name lookup capability to determine if a requested domain name is available or currently unavailable for registration.

2.9. Transfer of Sponsorship of Registrations. Registrar agrees to implement transfers of Registered Name registrations from another registrar to Registrar and vice versa pursuant to the Policy on Transfer of Registrations Between Registrars as may be amended from time to time by ICANN (the “Transfer Policy”).

2.10. Time. Registrar agrees that in the event of any dispute concerning the time of the entry of a domain name registration into the registry database, the time shown in the VNDS records shall control.

2.11. Compliance with Operational Requirements. Registrar agrees to comply with, and shall include in its registration agreement with each Registered Name Holder as appropriate, operational standards, policies, procedures, and practices for the Registry TLD established from time to time by VNDS in a non-arbitrary manner and applicable to all registrars (“Operational Requirements”), including affiliates of VNDS, and consistent with VNDS’s Registry Agreement with ICANN, as applicable, upon VNDS’s notification to Registrar of the establishment of those terms and conditions.

2.12. Resolution of Technical Problems. Registrar agrees to employ necessary employees, contractors, or agents with sufficient technical training and experience to respond to and fix all technical problems concerning the use of the Supported Protocol and the APIs in conjunction with Registrar’s systems. Registrar agrees that in the event of significant degradation of the System or other emergency, or upon Registrar’s violation of Operational Requirements, VNDS may, in its sole discretion, temporarily suspend or restrict access to the System. Such temporary suspensions or restrictions shall be applied in a nonarbitrary manner and shall apply fairly to any registrar similarly situated, including affiliates of VNDS.

2.13. Prohibited Domain Name Registrations. In addition to complying with ICANN standards, policies, procedures, and practices limiting domain names that may be registered, Registrar agrees to comply with applicable statutes and regulations limiting the domain names that may be registered.

2.14. Indemnification Required of Registered Name Holders. In its registration agreement with each Registered Name Holder, Registrar shall require each Registered Name holder to indemnify, defend and hold harmless VNDS, and its directors, officers, employees, agents, and affiliates from and against any and all claims, damages, liabilities, costs and expenses, including reasonable legal fees and expenses arising out of or relating to the Registered Name holder’s domain name registration.