Dear colleagues, SSAC has published a report to the domain transfer policy review PDP WG It covers few risks, including authinfo code hijack and halt of DNSSEC service while dns service is discontinued. https://www.icann.org/en/system/files/files/sac-119-en.pdf -- andrei