DTCโs Rules currently do not require any level or version for network technology, such as a web browser, or any level or version of communications technology or protocols, such as email encryption, secure messaging, or file transfers
DTCโs Rules currently do not require any level or version for network technology, such as a web browser, or any level or version of communications technology or protocols, such as email encryption, secure messaging, or file transfers, that participants may use to connect to or communicate with DTC.
Source:
Order Approving a Proposed Rule Change to Require Applicants, Participants, and Pledgees to Maintain or Upgrade Their Network or Communications Technology
DTC also proposes to amend its Rules to provide that failure to perform a necessary technology upgrade within the required timeframe would subject participants to a disciplinary sanctions.
Specifically, as an initial matter, the proposed requirements would enable DTC to discontinue using communication technologies such as TLS 1.0, TLS 1.1, SSL 2.0, SSL 3.0, and FTP, which have been deemed not secure by organizations such as NIST and/or the IETF. Removing support for such outdated technologies would reduce DTCโs potential exposure to cyberattacks and other cyber vulnerabilities.
