@Matti @siva How Zerodha team is planning to address what seems like a real and looming/overlooked issue.
In almost every case where I add any sort of contact or identification detail to my account, whether it’s an email address, phone number, or a document. I’m required to validate ownership. That might involve a one-time code, a verification link, or even uploading documents as proof. This is standard practice to ensure that I’m the rightful owner of the information I’m associating with my account.
So it feels inconsistent, and honestly very risky to allow something like an IPv4/IPv6 address to be added without any form of ownership validation. It effectively leaves the system open to spoofing, where anyone can register any IP address, even if they don’t own or control it. That’s a serious vulnerability.
It would not be just a technical oversight, it would cause real-world problems for users. At best, it’s chaotic, at worst, it’s exploitable.
I hope the zerodha team takes this seriously and considers adding a proper verification step for IP addresses, just as is done with other sensitive account information.