I was just taking a look around the new Online Service site that launched a few weeks ago and one thing struck me. If you go to Tag Holders --> Summary You will notice this field: PGP Keys #1: XXXXXXXXXXXXXXXX My understanding of it is that to use the Automaton all you need is this key and it's not IP based like the DAC. So what's to stop someone gaining access via brute force or by the many other various ways (SQL Injection etc), obtaining the PGP key and having a field day deleting or changing someones domains? I know it's a pretty stupid question, as that's the same for any registrar anywhere, but before having your own tag has to be one of the most secure ways of holding your domains. Is there any need for this information to be on the site?, I know personally I would prefer it not to be there. What does everyone else think?