I received an email from Paypal indicating that their standards are changing soon, and that the account we use for conard65.com sales will likely be affected by the TLS 1.2 and HTTP/1.1 Upgrade on June 30. Is the ClassCreator software compliant with these standards? Is there anything we will need to do on our website?

Thank you for the information. From what I read, it looks as though they are talking about the PayPal APP and not the API (which is what we are hooked into)... however I will forward this info for review by folks in programming.

The link says "API Endpoints. I will forward a copy to the CC helpdesk as you haven't responded to this since June 2nd.

Paypal sent this to API developers months ago and all changes are already in place. Since your account connects via our API you are all set.

Hi Kyle,

I just received this notice from PayPal on March 5:
"Our records indicate that you still need to make some critical security upgrades to your systems as well. If you see a "YES" next to a security change, your integration must be updated to accept these new security measures by the date specified:

• TLS 1.2 and HTTP/1.1 Upgrade - Complete by June 2018
- Update Needed: Yes"

May I assume that's it's OK to ignore this? Or does this affect my connection to my bank, eBay or other site? This is way above my pay grade!

Thanks!

Hi Sharon,

That must be regarding another system. We are fully upgraded to all the latest TLS requirements across the board.

Jessica
Class Creator Support

Thanks!

Just curious if CC is already upgraded, should I not receive the TLS upgrade messages from Paypal? Here's the contents of what they sent -

Every day, hundreds of millions of people use PayPal to manage and move money online or on a mobile device. That is why one of our top priorities is to ensure our customers have a safe, secure experience when transacting with PayPal. Often, that experience starts with the millions of merchants who accept PayPal around the world, which is why it is critical that we partner with you to provide the most secure environment online.

Since the Payment Card Industry (PCI) Council announced its original mandate a few years ago, the deadline for upgrading to more secured TLS versions has been extended several times. In addition, based on feedback from merchants, PayPal has extended our deadlines as well, to provide flexibility and support as businesses work to meet the new standards. That said, security threats continue to evolve. In order to provide the safest environment for our shared customers, we are moving forward with implementing these important upgrades in the first half of 2018.

We conducted a round of testing to emulate the upgraded security experience for supporting ONLY TLS 1.2 so that merchants can understand the areas of their integration that still require work. Our records indicate this Merchant Security Testing impacted you. Therefore, you will need to update your PayPal integration(s) to TLS1.2 PRIOR to June 2018 to avoid further service interruption. For more detailed information on upgrading to TLS1.2, please refer to the TLS 1.2 and HTTP/1.1 Upgrade site.

For more information on all of the security upgrades we will be implementing, please visit the 2017-2018 Merchant Security Roadmap site.

Thank you for using PayPal and for your support in providing the most secure payment experience for our shared global customers.

No action is required. Your set up should still be working as designed.

Thanks Scott but why is there this line in the email from Paypal?

Our records indicate this Merchant Security Testing impacted you. Therefore, you will need to update your PayPal integration(s) to TLS1.2 PRIOR to June 2018 to avoid further service interruption

Thx
George

I spoke to a programmer who told me that we have already accounted for this in our code.