“How long till my front door gets broken down?”
A friend pushed a domain into Tim Bray’s account at a top-25 registrar. Bray never had to accept it. ICANN’s own transfer policy says the new owner must confirm first. The registrar sent an email afterward instead. Anyone with a vile domain and a grudge can now put your name in the WHOIS and call the police.