PayPal has updated its services to require TLS 1.2 or higher for all HTTPS connections. You need to transition from using SSL certificates that utilize SHA-1 to the stronger SHA-256 signing algorithm. SHA-1 is a 22-year-old cryptographic algorithm that is being threatened by increases in computing power. As a result, you need to discontinue use of SSL connections that rely on the older 1024-bit certificates, such as the VeriSign G2 Root Certificate. The public Certificate Authority industry is actively phasing out 1024-bit Root Certificates in favor of more secure 2048-bit Root Certificates. More importantly, however, is that you may be compromising the integrity of customer data and ultimately your brand, so it’s best to revisit your integration with a security lens to ensure you’re secure! Your integration with PayPal may appear to work today, but if PayPal decides to disable certain cipher suites or protocol versions, your integration may be at risk. Important: What happens if I don't do these things? Let the protocol negotiate the highest version.Discontinue use of the VeriSign G2 Root Certificate.To help keep your integration safe from current and future security threats, we recommend that you follow the best practices outlined below. The POODLE and Heartbleed vulnerabilities were the results of such studies. Security experts try to stay one step ahead of cyber attackers by studying the SSL/TLS protocols for vulnerabilities.
The SSL/TLS protocols are the basis for secure communications on the web. The following guidelines cover both secure communications and development practices for secure applications. Security best practices for PayPal integrations Information security guidelines for developers.Security best practices for PayPal integrations.The following two main topics are covered:
This document provides important security related guidelines and best practices for both development projects and system integrations. REST APIs / PayPal Security Guidelines PayPal security guidelines and best practicesĪPI Current Last updated: October 18th 2021, 5:21:59 pm
0 kommentar(er)
