Originally posted by meow
You are right. That can be it.
I said it already in other words. It is possible to register a kg-domain with an ID, which
belongs to anyone, not yourself. And that is a general problem. You are
not asked for the password of the ID, which you fill out, when you
register a domain, but you are asked twice, if you
modify a domain.
So it doesn't count if
you registered the domain, you are billed because
anyone used your ID. In the case of a 3rd-level-domain this is not a big problem really, but with 2nd-level-domains this security hole can be misused too. Let's say one is looking for some free 3rd-level-domains and find them occupied by a domain-squatter. If that person is evil or/and silly, he could register a big number of 2nd-level-kg-domains for this person, for which the domain squatter would be billed.
I wonder that there were not more postings, that someone got a bill for a domain which he never registered.
And I believe you should write kg the scenario.
BTW I
use all my kg-domains (in the meantime about 20) and I was not billed.