New paypal SSL regulations - do I need an SSL

Hiya - I have been contacted by PayPal and told there are changes to the way they connect to websites to get payments - specifically Instant Payment Notification (IPN). They told us to look at this (which we did):-
https://www.paypal-knowledge.com/resources/sites/PAYPAL/content/live/FAQ/1000/FAQ1766/en_US/2015%20Merchant%20Security%2 0System%20Upgrade%20Guide%20%28U.K.%20English%29.pdf
Should be looking at installing an SSL Cert on this domain and would I need to change anything afterwards?

  • Adam Czajczyk

    Hello @elro,

    I hope you're well today and thank you for your question!

    According to PayPal your site does not need the certificate on front-end but the back-end (specifically: IPN URL and any other PayPal gateway related URL) will have to be protected by SSL Certificate. So, the answer would be yes: you will want to implement SSL cert on your site in order to maintain PayPal gateway.

    Other than that, our plugins will not be affected by these changes as long as there's an up to date and SHA-256 enabled SSL certificate implemented.

    I hope that helps!

    Cheers,
    Adam

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.