Paypal: IPN won't function without SSL Certificate soon?

Everett Level X⁴

December 23, 2017, 2:29 pm

8

Write the reason you're deleting this FAQ

Paypal: IPN won't function without SSL Certificate soon?

Recently I got an email from Paypal stating that my IPN will no longer function because the website doesn't have a SSL certificate. This is a very big move for Paypal because they are basically stating "we are increasing our security".

There are many websites out there with no SSL certificate, and are using the Paypal IPN. This being said, a lot of those websites won't properly function if you try using Paypal on them.

It seems like a lot companies that offer APIs, IPNs, and the like won't allow their systems to be used on websites that don't have an SSL certificate. I believe this is a positive step for Paypal, especially since it is used by so many. However, one thing about the SSL certificate is, is that not a lot of webmasters or people who own websites, do not necessarily know how to properly install a certificate. So if you have a website without an SSL certificate and are using Paypal as a means to get money from the sale of services or products you may want to invest in a SSL certificate or risk paypal not functioning!

Comments

Please login or sign up to leave a comment

Join

Judas2018

Judas2018

I looked into this and apparently, you do not need to have SSL installed on your website. What you need to do, is make sure that your verification post mechanism, reads as https:// instead of http://. If you set things up that way your visitors should still be able to purchase via paypal on your website.

7 years ago

Are you sure you want to delete this post?

Everett

Everett

Yes seems correct however if it isn't a valid SSL certificate, then browsers will display that it is not secure. SSL certificates cost a lot, almost as much as a domain at times and up to over $100 for some (for instance if you want a SSL cert for your subdomains along with your main website)

7 years ago

Are you sure you want to delete this post?

Judas2018

Judas2018

My web host actually has a standing offer for an SSL certificate for our site at a rate way under $100. As a thank you for me being a valued customer. I might take them up on it one day if I have to.

7 years ago

Are you sure you want to delete this post?

vinaya

vinaya

I have recently set up a website where I have installed paypal payment. The website has SSL certificate that was offered to me by the host. It is a free SSL from Lets Encrypt. I have many websites without SSL certificate. I don't know how to install these certificates on my websites and my host also does not support Lets Encrypt.

7 years ago

Are you sure you want to delete this post?

overcast

overcast

I think this was expected. Considering most of the hosts are offering SSL in the cpanel itself. I think in future this will be taken care of. And we just have to be serious about how the IPN based websites can be properly handled. But apart from that this won't be limited to the paypal. Soon I am sure other payment gateway are going to follow this. And hopefully this will bring more security as well.

7 years ago

Are you sure you want to delete this post?

mildredtabitha

mildredtabitha

Is this information for PayPal business account only or every PayPal user is required to have SSL certificate?

I have a personal account and I haven't received any similar email. I am still glad that PayPal wants to make things secure for us.

7 years ago

Are you sure you want to delete this post?

Judas2018

Judas2018

Basically Mildred, this situation affects people who have websites or blogs where they allow visitors to buy things from them, and process their payments through paypal. Sort of how ebay allows you to land on their site, pick something to buy, and use paypal to pay for your purchase.

7 years ago

Are you sure you want to delete this post?

keen2write

keen2write

Yeah, a lot of websites are using SSL now, I am with NameCheap they use to charge for there SSL. They still do but what I mean now when you buy the domain and use it for hosting they give a year free SSL which is great. I have my own Link shortener site like adfly so I just changed it on to SSL so thanks for the heads up mate...

7 years ago

Are you sure you want to delete this post?