The Automaton is our automated system that allows registrars to register and manipulate domain names. The Automaton can carry out a number of different operations, each of which has to be specifically requested by the registrars in a PGP (Pretty Good Privacy) secure email.  These emails are constructed using the following specific guidelines:

1. The subject of the email has to follow the format required for the specified operation
2. The body of the email has to follow the format required for the specified operation.  This mainly consists of a list of a predefined field name followed by a value that you specify.
3. A secure PGP signature is added to the email using the PGP key registered for the requesting tag.
4. Finally the email must be sent to a particular address depending on the domain name and operation being requested.  Details of this is given with the information on each operation.

PGP Signatures

The security of this system is provided primarily through the use of PGP signatures attached to the email messages sent to the Automaton.  The signature is checked in the following process

1. The date/time of the signature is checked to ensure that it was not created in the future or more than 72 hours before receipt of the message.  If it is out of date then the operation is rejected.
   
2. The ID of the PGP key used to create the signature is extracted from the signature.  This ID should correspond to a tag from a registered key.  If the ID is not recognised then the operation is rejected.
   
3. The checksum part of the signature is decrypted using the public key that we hold for that tag.  The message contents are checked to see that they have not been tampered with by recalculating the checksum and comparing with that supplied.  If the signatures do not match then the operation is rejected.

Operations

To use the Automaton you send a structured email with specific information in it.  This is described in the operations section.

Notifications

There are certain circumstances when the Automaton will send you a notification about a change that has happened to one of your domains.