{"id":1412,"date":"2018-04-11T15:09:40","date_gmt":"2018-04-11T15:09:40","guid":{"rendered":"https:\/\/www.withinweb.com\/info\/?p=1412"},"modified":"2018-04-12T08:27:36","modified_gmt":"2018-04-12T08:27:36","slug":"do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn","status":"publish","type":"post","link":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/","title":{"rendered":"Do I need SSL on my Web Server for use with PayPal IPN?"},"content":{"rendered":"

\"\"<\/a>PayPal upgrades:<\/p>\n

1) Changes to PayPal security for HTTP\/1.1 and TLS 1.2<\/strong>
\n 2) IPN Verification Postback to HTTPS<\/strong><\/p>\n

PayPal say their target for these is June 2018<\/strong><\/p>\n

 <\/p>\n

You may have seen an article from PayPal which talks about HTTP and TLS. This is a server issue
\nwhich is the responsibility of your web host. Essentially there is an upgrade by PayPal to ensure that
\nall their servers meet the latest standards and hence your web server will also require to operate
\nin that way. You should contact your host about this if you are unsure, although most servers will already
\nmeet these standards.<\/p>\n

 <\/p>\n

The second update is using HTTPS for IPN verification.<\/p>\n

PayPal says:<\/p>\n

“If you are using PayPal\u2019s instant Payment Notification (IPN) service, you will need to ensure
\nthat HTTPS is used when posting the message back to PayPal for verification. HTTP PostBacks
\nwill no longer be supported.”<\/p>\n

“Merchants and partners use Instant Payment Notification (IPN) to receive notifications of
\nevents related to PayPal transactions. The IPN message service requires that you acknowledge
\nreceipt of these messages and validate them. This process includes posting the messages back
\nto PayPal for verification. In the past, PayPal has allowed the use of HTTP for these
\nPostBacks . For increased security going forward, only HTTPS will be allowed for PostBacks to
\nPayPal. At this time, there is no requirement for HTTPS on the outbound IPN call from PayPal
\nto the merchant\u2019s IPN listener.”<\/p>\n

In practice this means that you need https on your web server to send https to PayPal and
\nthen you need to change the set up of you PHP-KeyCodes, PHP-eSeller or PHP-SecureArea
\napplication to identify the URL of the site as https rather than http.<\/p>\n

Note: if a customer tried to make a purchase it would still succeed, but your store would
\nnot be notified of that fact, and your records will not reflect the sale properly. Nor
\nwill the PHP application automatically send the information to the customer by email.<\/p>\n

Refer to PayPal documentation:<\/p>\n

https:\/\/www.paypal.com\/au\/webapps\/mpp\/ipn-verification-https<\/a><\/p>\n

So do I need SSL on my Web Server when using PayPal IPN? Yes, the PostBack from PayPal will not work
\nand SSL will give better security for your site.<\/p>\n","protected":false},"excerpt":{"rendered":"

PayPal upgrades: 1) Changes to PayPal security for HTTP\/1.1 and TLS 1.2 2) IPN Verification Postback to HTTPS PayPal say their target for these is June 2018   You may have seen an article from PayPal which talks about HTTP…<\/span><\/p>\n

Read more Do I need SSL on my Web Server for use with PayPal IPN?<\/span> ›<\/span><\/a><\/div>\n

<\/p>\n","protected":false},"author":53,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,5,23,4,11],"tags":[],"class_list":["post-1412","post","type-post","status-publish","format-standard","hentry","category-php-eseller","category-php-keycodes","category-php-register","category-php-securearea","category-security-issues"],"yoast_head":"\nDo I need SSL on my Web Server for use with PayPal IPN? - PHP Web Applications<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Do I need SSL on my Web Server for use with PayPal IPN? - PHP Web Applications\" \/>\n<meta property=\"og:description\" content=\"PayPal upgrades: 1) Changes to PayPal security for HTTP\/1.1 and TLS 1.2 2) IPN Verification Postback to HTTPS PayPal say their target for these is June 2018   You may have seen an article from PayPal which talks about HTTP…Read more Do I need SSL on my Web Server for use with PayPal IPN? ›\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/\" \/>\n<meta property=\"og:site_name\" content=\"PHP Web Applications\" \/>\n<meta property=\"article:published_time\" content=\"2018-04-11T15:09:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-04-12T08:27:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.withinweb.com\/info\/wp-content\/uploads\/2018\/04\/digital_image.jpg\" \/>\n<meta name=\"author\" content=\"Paul Gibbs\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Paul Gibbs\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/\"},\"author\":{\"name\":\"Paul Gibbs\",\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/#\\\/schema\\\/person\\\/b4df539cfb6debde6d0373daadfeb470\"},\"headline\":\"Do I need SSL on my Web Server for use with PayPal IPN?\",\"datePublished\":\"2018-04-11T15:09:40+00:00\",\"dateModified\":\"2018-04-12T08:27:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/\"},\"wordCount\":386,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/digital_image.jpg\",\"articleSection\":[\"PHP-eSeller\",\"PHP-KeyCodes\",\"PHP-Register\",\"PHP-SecureArea\",\"Security Issues\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/\",\"url\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/\",\"name\":\"Do I need SSL on my Web Server for use with PayPal IPN? - PHP Web Applications\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/digital_image.jpg\",\"datePublished\":\"2018-04-11T15:09:40+00:00\",\"dateModified\":\"2018-04-12T08:27:36+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/#\\\/schema\\\/person\\\/b4df539cfb6debde6d0373daadfeb470\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/digital_image.jpg\",\"contentUrl\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/digital_image.jpg\",\"width\":200,\"height\":136},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Do I need SSL on my Web Server for use with PayPal IPN?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/#website\",\"url\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/\",\"name\":\"PHP Web Applications\",\"description\":\"Information and support for products of WithinWeb.com\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/#\\\/schema\\\/person\\\/b4df539cfb6debde6d0373daadfeb470\",\"name\":\"Paul Gibbs\",\"sameAs\":[\"http:\\\/\\\/www.withinweb.com\"],\"url\":\"https:\\\/\\\/www.withinweb.com\\\/info\\\/author\\\/azpg27\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Do I need SSL on my Web Server for use with PayPal IPN? - PHP Web Applications","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/","og_locale":"en_US","og_type":"article","og_title":"Do I need SSL on my Web Server for use with PayPal IPN? - PHP Web Applications","og_description":"PayPal upgrades: 1) Changes to PayPal security for HTTP\/1.1 and TLS 1.2 2) IPN Verification Postback to HTTPS PayPal say their target for these is June 2018   You may have seen an article from PayPal which talks about HTTP…Read more Do I need SSL on my Web Server for use with PayPal IPN? ›","og_url":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/","og_site_name":"PHP Web Applications","article_published_time":"2018-04-11T15:09:40+00:00","article_modified_time":"2018-04-12T08:27:36+00:00","og_image":[{"url":"https:\/\/www.withinweb.com\/info\/wp-content\/uploads\/2018\/04\/digital_image.jpg","type":"","width":"","height":""}],"author":"Paul Gibbs","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Paul Gibbs","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/#article","isPartOf":{"@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/"},"author":{"name":"Paul Gibbs","@id":"https:\/\/www.withinweb.com\/info\/#\/schema\/person\/b4df539cfb6debde6d0373daadfeb470"},"headline":"Do I need SSL on my Web Server for use with PayPal IPN?","datePublished":"2018-04-11T15:09:40+00:00","dateModified":"2018-04-12T08:27:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/"},"wordCount":386,"commentCount":0,"image":{"@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/#primaryimage"},"thumbnailUrl":"https:\/\/www.withinweb.com\/info\/wp-content\/uploads\/2018\/04\/digital_image.jpg","articleSection":["PHP-eSeller","PHP-KeyCodes","PHP-Register","PHP-SecureArea","Security Issues"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/","url":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/","name":"Do I need SSL on my Web Server for use with PayPal IPN? - PHP Web Applications","isPartOf":{"@id":"https:\/\/www.withinweb.com\/info\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/#primaryimage"},"image":{"@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/#primaryimage"},"thumbnailUrl":"https:\/\/www.withinweb.com\/info\/wp-content\/uploads\/2018\/04\/digital_image.jpg","datePublished":"2018-04-11T15:09:40+00:00","dateModified":"2018-04-12T08:27:36+00:00","author":{"@id":"https:\/\/www.withinweb.com\/info\/#\/schema\/person\/b4df539cfb6debde6d0373daadfeb470"},"breadcrumb":{"@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/#primaryimage","url":"https:\/\/www.withinweb.com\/info\/wp-content\/uploads\/2018\/04\/digital_image.jpg","contentUrl":"https:\/\/www.withinweb.com\/info\/wp-content\/uploads\/2018\/04\/digital_image.jpg","width":200,"height":136},{"@type":"BreadcrumbList","@id":"https:\/\/www.withinweb.com\/info\/do-i-need-ssl-on-my-web-server-for-use-with-paypal-ipn\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.withinweb.com\/info\/"},{"@type":"ListItem","position":2,"name":"Do I need SSL on my Web Server for use with PayPal IPN?"}]},{"@type":"WebSite","@id":"https:\/\/www.withinweb.com\/info\/#website","url":"https:\/\/www.withinweb.com\/info\/","name":"PHP Web Applications","description":"Information and support for products of WithinWeb.com","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.withinweb.com\/info\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.withinweb.com\/info\/#\/schema\/person\/b4df539cfb6debde6d0373daadfeb470","name":"Paul Gibbs","sameAs":["http:\/\/www.withinweb.com"],"url":"https:\/\/www.withinweb.com\/info\/author\/azpg27\/"}]}},"_links":{"self":[{"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/posts\/1412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/users\/53"}],"replies":[{"embeddable":true,"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/comments?post=1412"}],"version-history":[{"count":5,"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/posts\/1412\/revisions"}],"predecessor-version":[{"id":1419,"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/posts\/1412\/revisions\/1419"}],"wp:attachment":[{"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/media?parent=1412"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/categories?post=1412"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.withinweb.com\/info\/wp-json\/wp\/v2\/tags?post=1412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}