@Matti @siva How Zerodha staff is planning to deal with what looks as if an actual and looming/missed subject.

In nearly each case the place I add any form of contact or identification element to my account, whether or not it’s an e mail handle, cellphone quantity, or a doc. I’m required to validate possession. Which may contain a one-time code, a verification hyperlink, and even importing paperwork as proof. That is normal observe to make sure that I’m the rightful proprietor of the data I’m associating with my account.

So it feels inconsistent, and truthfully very dangerous to permit one thing like an IPv4/IPv6 handle to be added with none type of possession validation. It successfully leaves the system open to spoofing, the place anybody can register any IP handle, even when they don’t personal or management it. That’s a critical vulnerability.

It might not be only a technical oversight, it might trigger real-world issues for customers. At finest, it’s chaotic, at worst, it’s exploitable.

I hope the zerodha staff takes this critically and considers including a correct verification step for IP addresses, simply as is finished with different delicate account data.

StaticIP:

Static IP Whitelisting Course of – Potential Misuse and Prompt ImprovementsCurrent Course of Understanding:

Imagine matti already replied you right here, please verify.

With the brand new deadline pushed from Aug 1, 2025 → Oct 1, 2025 now approaching, Looks like no dealer has launched even a sandboxed atmosphere to check these, nor has there been any affirmation in the event that they ever will. Everybody appears busy constructing their very own algo-trading platforms with methods market first. More than likely end result ought to be one more extension, most likely pushed to early subsequent 12 months.

@siva what’s Zerodha’s stance, identical as different brokers or a distinct method ?

1 Like

shabbirhasan:

Looks like no dealer has launched even a sandboxed atmosphere to check these,

There can be no testing atmosphere, methods should be examined in stay solely with actual funds for few months to get accredited. That is incase if one wish to promote them.

For particular person use there is no such thing as a testing concerned simply registration will do.

shabbirhasan:

what’s Zerodha’s stance

We received’t offer any market place to start with.

1 Like

Thanks @siva for clarifying Zerodha’s stance . There’s only one factor I’d wish to ask particularly: what about Static IPv4/IPv6 registration for particular person customers?

If the sensation is that the deadline is not going to be pushed once more, a tentative date/week from Zerodha would assist us put together, since this step must be accomplished (and examined) by every person. Up to now, appears no dealer together with Zerodha has supplied even an indicative timeline.

As soon as once more, thanks for the fantastic work and the continual assist you and your staff present.

siva:

For particular person use there is no such thing as a testing concerned simply registration will do.

The place /How will we register the IPs (for private use)?

VijayNair:

The place /How will we register the IPs (for private use)?

We have now not but began the method, seemingly in one other week we are going to open.

2 Likes

@siva Any chance of Zerodha launching an algo market like different brokers (e.g., Dhan)?

Since Kite hasn’t but supplied an IP whitelisting web page, it might be nice if you happen to may plan one thing as an algo supplier to run our technique — we might like to subscribe to it.

@siva any information/progress on static IP registration web page?

Source link

Leave A Reply

Company

Bitcoin (BTC)

$ 116,413.00

Ethereum (ETH)

$ 4,586.90

BNB (BNB)

$ 987.64

Solana (SOL)

$ 244.39
Exit mobile version