WPP and SSL

[Zinfandel]

Thanks Kobra,

I let my lack of understanding rear it's ugly head.
But, after thinking about it, I actually got to understanding that what they meant in the Disclosure and Compliance Document pertains to transmissions to and from PayPal, but not those between the customer's client PC and the hosting web-server where my site sits.

I get it now...

Thanks!

[wentsul]

Kobra,

I'm currently using zen cart with minimal knowledge of its underpinnings. I've been trying to read up on whether or not you MUST have SSL set up on your site to use PayPal Pro + Zen Cart.

From my understanding, zen cart sends all the user data over to paypal using CURL, so therefore the user's CC information is encrypted and zen cart abides by the TOS of paypal with or without the site having a SSL certificate.

This seems all good and might be the reason for the many forum posts I've read saying that SSL is not necessary but is good for costumer piece of mind. However, before the information is sent from zen cart over to paypal, it goes through a minimum of two requests to the zen cart server in the confirmation and completion processes. During these requests, anyone listening on the network would be able to see the user's CC information in plain text.

Is there something I'm missing. Could you just confirm whether or not to fully protect the users CC information throughout the entire process, using zen cart + pay pal pro, you MUST have SSL installed?

Thanks,

Michael

[kobra]

it goes through a minimum of two requests to the zen cart server in the confirmation and completion processes. During these requests, anyone listening on the network would be able to see the user's CC information in plain text.

Exactly why you must have SSL for your site - I as a customer will not be entering my info on a non-secure connection...

I have not checked PayPal Pro Flow but others like Linkpoint require that you specify the htpps address - (need SSL to enable htpps:)