Using PayPal in SBI!. For services. Plug-n-play shopping cart. E-goods. Other uses?

Moderator: Bernie from RV'ing in Western USA

#1393833 by Ruth from Mckinney
Tue Mar 06, 2018 8:30 pm
Please can anyone explain what I need to do to comply with paypal's forthcoming changes in order to verify that my site will support TLS 1.2 and HTTP/1.1, whatever that means?

#1393847 by Ruth from Mckinney
Tue Mar 06, 2018 9:17 pm
Thanks Debs, is it very difficult to convert, can you point me in the right direction to find out
how to go about this?

Kind Regards,
#1393887 by Debs from SiteSell
Wed Mar 07, 2018 5:28 pm
Start with the HTTPS help (there are 2 tools in Site Central, start with the first one, don't do the 2nd until site is ready).

Also read this article: ... tasks.html

Then before you do the 2nd item in Site Central, read this one: ... ssues.html

There are also several threads in the SiteSell News forum about when the tools were released, what to do, etc. if you want to look at those (optional).

All my best,

#1393890 by Mary from Mico
Wed Mar 07, 2018 5:44 pm

Hi Ruth,

I've already converted to https, so I'm not sure what the relation is; yet PayPal's note:

Please can anyone explain what I need to do to comply with paypal's forthcoming changes in order to verify that my site will support TLS 1.2 and HTTP/1.1, whatever that means?

This is the part that scared me:

Our records indicate that you still need to make some critical security upgrades to your systems as well. If you see a "YES" next to a security change, your integration must be updated to accept these new security measures by the date specified:

• TLS 1.2 and HTTP/1.1 Upgrade - Complete by June 2018
- Update Needed: Yes

So I wrote Support and here is what they said:

Am I right in understanding that you use Paypal Add to Cart
or Buy Now buttons on your site, Mary? If so, then I believe
you can ignore the message from Paypal. I believe it is only
relevant if you actually process the payment on your site
and not on the Paypal site, which is unlikely.


You need not worry about the
message from Paypal if your sales are handled on the
Paypal site.

Yet, my case is different as I use E-Junkie. So I went to their forum and found that they're ready.

#1394086 by Crispin from Olivet
Sat Mar 10, 2018 10:16 am
I am not sure that the TLS issue can just be ignored.
My padlocks were green, but now I have an amber exclamation beside some of them, despite using the https checker with no faults.
I went to a website called '' and got the following result for a page I tested: ... 4cff3fec0c
It looks as if the TLS issue may be affecting the SSL part of my site.
The other thing I discovered while I was combing through my site to check all the https issues were sorted was that my affiliate link back to SBI itself was only http and when I tried changing it to https, it didn't work which was a bit bizarre!
#1394108 by Debs from SiteSell
Sat Mar 10, 2018 3:44 pm
Check in the last group of forums about that http affiliate link Crispin.

No, you shouldn't ignore TLS; however our programmers are working on the TLS upgrade. You can't do anything; and there is nothing to do at this time, except you need to wait for the update. The current version is however good for a couple more months yet.

All my best,

#1394111 by Will from Los Ojos
Sat Mar 10, 2018 3:53 pm
Hi Crispin,

I "think" your Mixed Content is coming from the SOVRN ad in the right column. I've come across this on a couple of other sites already. It won't show up in the HTTPS checker, because it's only called into the browser once the SOVRN script has been executed. I think it's probably a tracking pixel, ie a 1 x 1 image pixel. You can confirm that by removing SOVRN, and seeing if the warning goes away.

The TLS warning looks like a false positive. Chrome says that "The connection to this site is encrypted and authenticated using TLS 1.2".


The tester on this page, for example, also says it's using TLS 1.2.[Domain Private]&hideResults=on

As far as the affiliate link back to SBI goes, you can have links out from your page to an Not Secure HTTP page. When someone clicks the link, they are leaving your site to go to anther one. Your connection with the visitor is broken, so there's no security issue with your page. When they get to the other page, their browser will say "Your connection to this site is not secure" or similar wording.

#1394123 by Debs from SiteSell
Sat Mar 10, 2018 6:55 pm
HTTP links out aren't a problem, as Will said, however be aware if you call to an http resource vs an https, then yes that will cause a warning about the security of your page. If you link to images via http and not https; that is an example of what I mean and is a common issue to watch for; also JavaScript files (widgets or similar), font files ... any file call will cause this.

All my best,

#1394129 by Crispin from Olivet
Sat Mar 10, 2018 9:17 pm
Thanks for your help and advice. I will try removing the sovrn ad unit and see if that gives me back the green padlock in Firefox. Chrome still says the site is secure, but Firefox doesn't!
#1394130 by Mary from Mico
Sat Mar 10, 2018 9:38 pm

Thank you for posting. I did not know some of this and was approached by Sovrn last fall. I look forward to reading how this ends.

#1394481 by Crispin from Olivet
Fri Mar 16, 2018 10:45 pm
Hi - just to keep you updated...
I did remove the sovrn ad units from one of my websites and the amber exclamation mark mysteriously disappeared and I was back to the green padlock on Firefox.
I contacted sovrn who apparently respond to all emails within one working day to see if they could do anything about their ad code but they didn't respond. However, the next day, the amber exclamation disappeared from my other site (despite the sovrn ads still being there) and both my sites now are back to solid green padlocks on Firefox.
I tried emailing sovrn about this two days ago to see if they have done anything, but again no response.
It only seems to be Firefox at the moment that is creating the amber exclamations - the other browsers I have tried all show a secure padlock.
Hope this helps anyone having the same problems - I know this is probably the wrong thread for this comment - sorry!
#1394489 by Mary from Mico
Sat Mar 17, 2018 12:18 am
Hi Crispin.

Thank you for this update.

I look forward to seeing how it resolves and will hope for the best in the mean time.


Users browsing this forum: No registered users and 1 guest