Tweet Magento 1 and Magento 2 merchants that use Authorize.net Direct Post as one of their payment methods will need to have a patch applied and update their Authorize.net settings in the Magento admin panel before March 28, 2019. Authorize.net will stop supporting the MD5 hash method that Magento uses for its Direct Post integration. […]

Tweet The biggest change with regards to SSL and using HTTPS links on all pages is: The Google Chrome web browser has begun rolling out Version 68, which will mark any website as “insecure” that is not using an SSL certificate for any web page. The browser now shows this explicitly: Previously, the words “Not […]

Tweet Did you recently receive an email from PayPal with the subject “Certificate Expire Notification” talking about your API certificate needing to be replaced? If you use PayPal Express or PayPal Website Payments Pro, you will want to pay attention to this email. You have until December 31, 2017 to update the API certificate from […]

Tweet There are so many payment processors available that it can be a daunting task for a new merchant to choose one.  It usually comes down to which are the most popular, what their rates are, and of course – what processors your ecommerce solution supports. Today we’re going to review what processors a portion […]

Tweet As we discussed in a previous PCI blog post, the PCI council has pushed back the date for ending support for TLS 1.0 to June 30, 2018. However, many ecommerce related services are still going forward with removing support for TLS 1.0 this year. What does this mean for ecommerce merchants? Confusion abounds We’ve […]

Tweet On December 15th, the PCI Council updated its date for when TLS 1.0 (an older security protocol used on SSL secure web pages) would be considered obsolete and a PCI violation. Originally, they listed June 30, 2016 as the End of Life (EOL) date for TLS 1.0. They have now extended that deadline to […]

Tweet In April 2015, The PCI Security Standards Council released its latest PCI DSS 3.1 requirements. Included in this document is a small paragraph that has lots of major implications… Note: SSL and early TLS are not considered strong cryptography and cannot be used as a security control after June 30, 2016. Prior to this […]

Tweet Google Checkout / Buy With Google Wallet button support in every ecommerce cart will officially be retired. After November 20, 2013, it will no longer be a viable service for any ecommerce merchant selling physical goods. Google explains it in more detail in the Google Checkout Help Docs and in their Google Commerce Blog […]

Tweet The State of The PCI Union in 2012 is poor, very poor. That is my conclusion after many months of observing, working with, and fighting against the PCI scanning companies that are trying to enforce PCI standards. What we do As a web host that caters to ecommerce clients, we deal with PCI issues […]

Tweet PayPal Standard, the old “standard” for paying with PayPal, has seen its best days behind it. These days, there is no reason not to use PayPal Express Checkout. I wrote about this a few years ago in a post titled Ditch PayPal Standard for PayPal Express. I’m writing it again as PayPal made a […]