Paypal New Secuirty Updates required some changes in Woocommerec
-
Hey there,
I got following email from Paypal, could you please cofirm if these things will be fixed by you guys in coming release or do i need to do something on my website?
Please check following :
=================================================
We’ve extended the deadlines on some of the changes required to your PayPal integration.
Recently we notified you about our plans to implement a series of security upgrades that will require changes to your PayPal integration. We have had feedback from many customers who were concerned at not being able to meet the timings. As a result where possible, we’ve extended the deadlines on these changes (see table below for details). If you’re already implementing the changes to meet the original deadlines, thank you and please don’t stop.
As a leader in payments, the upgrades that we are implementing will ensure our security measures continue to be a model for best practice and incorporate industry standards, including those set by the Payment Card Industry (PCI) Security Standards Council. Most importantly, the upgrades will allow us to continue to provide the highest level of security available for our customers.
Do I need to do something?
Yes. We’ve identified that the security upgrades we are making will require changes to your PayPal integration. By making these changes you’ll help future-proof your systems, remain up to date on security measures and ensure your business continues to accept payments.
There are six areas that our security upgrades will impact and we’ve identified the areas that need your attention. The chart below shows whether you will need to make changes, or if your business is already compliant or does not use that functionality.
Change
(click links below for more details)
Change required?
Old Deadline
New Deadline
Complexity
IP Address Update for PayPal Secure FTP Servers
Yes
14 April 2016
12 May 2016
Medium
SSL Certificate – System Upgrade for SHA-256 compatibility
Yes
17 June 2016
30 September 2016
Note: PayPal will be undertaking testing between 17 June and 29 September to prepare for the full cutover to SHA-256 on 30 September 2016. We strongly recommend that your systems be compatible with SHA-256 by 17 June to avoid service interruptions during this period.
High
TLS 1.2 and HTTP/1.1 Upgrade
Yes
17 June 2016
30 June 2017
High
IPN Verification Postback to HTTPS
Yes
30 September 2016
30 June 2017
Low
Discontinue Use of GET Method for Classic NVP/SOAP APIs
Yes
30 September 2016
30 June 2017
Low
Merchant API Certificate Credential Upgrade
Yes
Act between 31 January 2016 and 1 January 2018 (depending on your certificate expiration date)
Act between 31 January 2016 and 1 January 2018 (depending on your certificate expiration date)
(No Deadline Change)
Medium
How do I make these changes?
The details on the required changes and how to action them, can be found on our 2016 – 2017 Merchant Security Roadmap Microsite.
We also encourage you to speak with your web hosting company, e-commerce software provider or in-house web programmer/system administrator for further assistance in implementing these changes, if needed.
What will happen if I don’t make the changes by the due date?
Our security upgrades will be implemented over the coming months and if you have not made the necessary changes by the dates shown in the table above you will be unable to accept payments with PayPal until you do so. The exception to this is change #1: IP Address Update for PayPal Secure FTP Servers, which will restrict access to reports from PayPal’s SFTP server if the change has not been made by the date shown above.
If you require further assistance, please go to our Technical Support Portal and raise a ticket selecting Security Changes (TLS/Certificate) within the Product dropdown.
At PayPal we’re committed to delivering the highest level of security available for our customers. Thank you for your continued support and helping us maintain these standards for all our customers.
Was this email helpful? Please click here to let us know how we’re doing at keeping you informed
- The topic ‘Paypal New Secuirty Updates required some changes in Woocommerec’ is closed to new replies.
