Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More
Archived

Is Thunderbird compatable with the upcomming Paypal Security updates?

JefferyT

I received the following email from Paypal. I do not understand if I need to do any thing...

"To avoid service interruptions, please ensure that your systems are upgraded and compatible as testing will occur between now and September 30, 2016.

JEFFERY THOLE,

At PayPal, data security and safety are our top priorities, and as a result we’re implementing a series of security upgrades throughout 2016 and 2017.

To comply with industry standards, we’re moving the SSL certificates on our endpoints to stronger encryption known as SHA-256 starting after September 30, 2016. Compatibility with SHA-256 will help strengthen your protection and ensure that your business systems are up to date with the latest security measures.

If your systems aren’t SHA-256 compatible, your business will be unable to accept payments with PayPal until changes are made. For more details on our transition to SHA-256, please visit our SSL Certificate Upgrade Microsite.

How to Prepare

To prepare for the full cutover starting after September 30, 2016, we’ll be performing a series of tests on our endpoints starting in July 2016. The purpose for the testing is to ensure we’ve helped our merchants prepare for the full transition to SHA-256 happening after September 30, 2016. For a complete list of testing dates and times, please go to SSL Certificate Upgrade Microsite for the details. We’ll follow up with you with a separate email, if you’re impacted during our testing.

Security Upgrades Coming in June 2017

We also wanted to remind you that we’ve rescheduled several of our upgrades to accommodate merchants who couldn’t meet our original timelines. The following schedule shows details of whether your business is already compatible or doesn't use the functionality. If you do need to make security upgrades, the schedule will identify what changes need to be made.

Change

(click hyperlinks for more details)


Change required?


NEW DEADLINES


Complexity

TLS 1.2 AND HTTP/1.1 Upgrade


No


June 30, 2017


High

IPN Verification Postback to HTTPS


Yes


June 30, 2017


Low

Discontinue Use of GET Method of Classic NVP/SOAP


No


June 30, 2017


Low

Merchant API Certificate Credential Upgrade


No


Act between January 31, 2016 and January 1, 2018 (depending on your certificate expiry date)


Medium


The details on the required changes and how to action them, can be found on our 2016-2017 Merchant Security Roadmap Microsite.

We encourage you to contact your web hosting company, e-commerce software provider, in-house web programmer, or system administrator for assistance with these changes. If you have any questions, please visit our Help pages by clicking Help & Contact at the bottom of any PayPal page. If you have any questions, please go to Contact Us at any www.paypal.com page or Technical Support Portal to submit a ticket. Select “Security Changes (TLS/Certificate)” within the Product drop-down.

Thank you for your support of our commitment to maintain high security standards for all our global customers.

Was this email helpful? Please click here to let us know how we're doing at keeping you informed.


Please do not reply to this email. We're unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking Help on any PayPal page.

© 2016 PayPal Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131."

I received the following email from Paypal. I do not understand if I need to do any thing... "To avoid service interruptions, please ensure that your systems are upgraded and compatible as testing will occur between now and September 30, 2016. JEFFERY THOLE, At PayPal, data security and safety are our top priorities, and as a result we’re implementing a series of security upgrades throughout 2016 and 2017. To comply with industry standards, we’re moving the SSL certificates on our endpoints to stronger encryption known as SHA-256 starting after September 30, 2016. Compatibility with SHA-256 will help strengthen your protection and ensure that your business systems are up to date with the latest security measures. If your systems aren’t SHA-256 compatible, your business will be unable to accept payments with PayPal until changes are made. For more details on our transition to SHA-256, please visit our SSL Certificate Upgrade Microsite. How to Prepare To prepare for the full cutover starting after September 30, 2016, we’ll be performing a series of tests on our endpoints starting in July 2016. The purpose for the testing is to ensure we’ve helped our merchants prepare for the full transition to SHA-256 happening after September 30, 2016. For a complete list of testing dates and times, please go to SSL Certificate Upgrade Microsite for the details. We’ll follow up with you with a separate email, if you’re impacted during our testing. Security Upgrades Coming in June 2017 We also wanted to remind you that we’ve rescheduled several of our upgrades to accommodate merchants who couldn’t meet our original timelines. The following schedule shows details of whether your business is already compatible or doesn't use the functionality. If you do need to make security upgrades, the schedule will identify what changes need to be made. Change (click hyperlinks for more details) Change required? NEW DEADLINES Complexity TLS 1.2 AND HTTP/1.1 Upgrade No June 30, 2017 High IPN Verification Postback to HTTPS Yes June 30, 2017 Low Discontinue Use of GET Method of Classic NVP/SOAP No June 30, 2017 Low Merchant API Certificate Credential Upgrade No Act between January 31, 2016 and January 1, 2018 (depending on your certificate expiry date) Medium The details on the required changes and how to action them, can be found on our 2016-2017 Merchant Security Roadmap Microsite. We encourage you to contact your web hosting company, e-commerce software provider, in-house web programmer, or system administrator for assistance with these changes. If you have any questions, please visit our Help pages by clicking Help & Contact at the bottom of any PayPal page. If you have any questions, please go to Contact Us at any www.paypal.com page or Technical Support Portal to submit a ticket. Select “Security Changes (TLS/Certificate)” within the Product drop-down. Thank you for your support of our commitment to maintain high security standards for all our global customers. Was this email helpful? Please click here to let us know how we're doing at keeping you informed. Please do not reply to this email. We're unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking Help on any PayPal page. © 2016 PayPal Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131."

All Replies (3)

How is this related to Thunderbird?

Is Thunderbird SHA-256 compatible?

I don't see any mention of email protocols there.