If somebody request a transfer of one of my domains, and:

1. I dont have the domain locked.
2. I don't reply/reply to the authorize request.

Can he get it?

Can he get it?
Yup.

how many days the system waits for my authorization?

Originally posted by virginia
Yup.

To help clarify virginia's response, that's a yes if the request is
coming from the losing registrar. Theoretically the losing registrar
won't get the transfer request if not confirmed with the gaining
registrar first.

But after what happened to panix.com (read their site), best you
lock it up and keep that email active.

Originally posted by DomiNET.net
how many days the system waits for my authorization?

For the gaining registrar, check with them. For the losing registrar,
5 days before letting it out if the name's unlocked.

the gaining registrar sends an email to the administrative contact to approve/disapprove the transfer.

but for security sometimes it get processed without approving that email and you have 5 days only to contact the losing registrar to DENY the transfer.