1 / 3
Nov 2014

Was wondering if this issue will affect ejunkie and the way it processes Paypal transactions:



On Tuesday, October 14, 2014, details were released that version 3 of Secure Sockets Layer (SSL 3.0) is vulnerable at the protocol level. SSL provides encryption to protect your information from attackers. Many websites and internet businesses are reliant on SSL 3.0.



Since many merchants rely on SSL 3.0 to connect to PayPal, we haven’t immediately turned it off. However, to help mitigate risk associated with this vulnerability, we’re urging our merchants to disable SSL 3.0 as soon as possible. Unfortunately, this necessary step may cause compatibility problems resulting in the inability for customers to pay with PayPal on your site or other processing issues that we’re still trying to identify.

  • created

    Nov '14
  • last reply

    Nov '14
  • 2

    replies

  • 1.3k

    views

  • 2

    users

Yes, in fact v3 of SSL is long obsolete, so we have supported connections using newer versions of SSL for some time now; moreover, due to recently announced vulnerabilities in SSL v3 such as you referenced, our sysadmin has completely disabled legacy SSLv3 support in our servers' SSL software.

That is great to hear, thank you for the quick response!