I received an email from PayPal today -- it reads, in part:
Our records indicate that you still need to make critical security upgrades to your systems. If you see a “YES” next to a security change, your integration must be updated to accept these new security measures as soon as possible.
Change Required?
Merchant API Certificate Credential Upgrade No
TLS 1.2 and HTTP/1.1 Upgrade Yes
IPN Verification Postback to HTTPS No
Discontinue Use of GET Method of Classic NVP/SOAP No
If you have not made the necessary changes by the date specified, you won’t be able to accept payments with PayPal until you do so. But most importantly, failure to make these upgrades will put your customers’ sensitive personal and financial data at risk.
--End of PayPal email snippet--
I'm hoping that that e-junkie complies with the TLS 1.2 and HTTP/1.1 Upgrade and the reason why I got this message is PayPal likely scanned my website, thinking it is a stand-alone e-commerce site.
Am I correct in my assumption? Or, is there something I must do?
Thank you in advance for your time....