Help & Resource Center

PayPal Service Upgrade - SHA-256

Question

I received an ominous letter from PayPal saying they were upgrading their Secure Sockets Layer (SSL) to a new SHA-256 algorithm. I have no idea what this means and want to be sure our website still works with PayPal after they make this change in October 2015.  Could you please let me know? Thank you.

 

Answer

We received the same notice, which I'm sure looked something like the following:

The official PayPal announcement can be found here:

In a nutshell, this PayPal upgrade to SHA-256 does not affect your website.  This upgrade only affects those websites using the older SHA-1 cryptographic primitive, which is not being used on any of the websites managed by Modern Retail.  Instead, we only use the newer SHA-2 cryptographic primitive, which is unaffected by this PayPal upgrade.

If you have any further questions, please create a Support Request.  Thank you.