USPS Ending Support for Unsecure HTTP Endpoints

Author	« Topic »
pauld Ecommerce Template Expert USA 500 Posts	Posted - 03/14/2021 : 07:08:57 Last week the US Postal Service sent us the email below stating that effective 6/24/2021 they will remove support for unsecure HTTP endpoints. The email states that we "have been identified as a user of the unsecure HTTP endpoints for Web Tools API requests." There's a thread on this in the ASP forum https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=113788. Can anyone suggest a way to verify that our PHP store will be OK with this change? Thanks in advance for this. - Paul D. -------- Forwarded Message -------- Subject: USPS Web Tools Notice: Unsecure HTTP Endpoint Retirement Date: Fri, 12 Mar 2021 20:34:30 +0000 From: Samiya, Nishwath - Washington, DC - Contractor <Nishwath.Samiya@usps.gov> CC: WEBTOOLS <webtools@usps.gov> Hello, This message explains some security improvements planned for the USPS Web Tools services. Effective June 24th, 2021, Web Tools will remove support for all unsecure HTTP endpoints. After this change, all requests to an unsecure HTTP endpoint will fail when attempting to access the Web Tools APIs and integrators may see an error message. To continue using the Web Tools APIs, all requests must be made using the secure HTTPS endpoints listed below. Integrators currently using an unsecure HTTP endpoint should transition as soon as possible to the appropriate secure HTTPS endpoint below to prevent any loss of service. This change will impact only the API endpoints; the API request and response schemas will not change. You are receiving this message because you have been identified as a user of the unsecure HTTP endpoints for Web Tools API requests. Please review the entire message carefully and share with your web developer, software vendor, and/or IT service provider to determine if your use of the Web Tools APIs will be affected. Support for the following unsecure HTTP endpoints will be discontinued in all Web Tools environments. In advance of the retirement date, please update your endpoints to the secure HTTPS endpoints listed below. Web Tools Unsecure HTTP Endpoints Retirement Schedule Environment Unsecure HTTP Endpoint Retirement Date New Secure HTTPS Endpoint TEST http://stg-production.shippingapis.com 06/24/2021 https://stg-production.shippingapis.com PROD http://production.shippingapis.com 06/24/2021 https://production.shippingapis.com Contact webtools@usps.gov with any questions or concerns. Thank you, USPS Web Tools Program Office Visit us at: www.usps.com/webtools
insight ECT Moderator USA 4479 Posts	Posted - 03/14/2021 : 09:32:23 https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=113788 Peter Professional ecommerce web hosting services Shared hosting Windows & Linux \| Dedicated servers \| Domains \| SSL Ecommerce Templates specialists since 2003 https://servelink.com
pauld Ecommerce Template Expert USA 500 Posts	Posted - 03/14/2021 : 09:40:49 I linked to that ASP Forum thread in my original post, and would like to confirm the relevant action for PHP stores.
insight ECT Moderator USA 4479 Posts	Posted - 03/14/2021 : 09:47:03 Well, then you have your answer . If you're worried about it you can change http://production.shippingapis.com to https://production.shippingapis.com in a couple of places in vsadmin/inc/uspsshipping.php and vsadmin/inc/inctracking.php, failing that it will be in the updater next week. Peter Professional ecommerce web hosting services Shared hosting Windows & Linux \| Dedicated servers \| Domains \| SSL Ecommerce Templates specialists since 2003 https://servelink.com
	« Topic »