Letter from PayPal about New Security Standards the Must be Implemented by June 30th

22 Jun 2018, 4:00 PM

New Zenner

Join Date:: Jun 2018
Location:: California
Posts:: 1
Plugin Contributions:: 0

Letter from PayPal about New Security Standards the Must be Implemented by June 30th

I received a letter from PayPal telling me that the Payment Card industry Security Standards Council (PCI) has issued a new security standard that must be implemented by June 30 2018. All entities mus stop using Secure Sockets Layer (SSL)/early Transport Layer Security (TLS) as a security control in their systems and completely transition to a secure version of TLS encryption protocols, such as TLS 1.2. (more info found on pcisecuitystandards.org)

Their records show that our PayPal integration uses an older encryption protocol.

Is this something that needs to change within ZenCart?

22 Jun 2018, 4:41 PM

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,515
Plugin Contributions:: 176

Re: Letter from PayPal about New Security Standards the Must be Implemented by June 30th

The latest version of Zen Cart is already fully compatible with TLS 1.2.

But if your hosting company's servers aren't ready yet, then you'll have to work with them to get up to date.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.