Jump to content

eNom Secure


Recommended Posts

It's only when they're handling credit card details, and comes into effect on June 15th:

 

Attention All eNom API Resellers:

 

eNom strives to maintain the highest levels of security in our API and internal infrastructure. In a continual effort to enhance the level of security, on June 15th 2010, we will be working to ensure all credit card related transactions are directed to eNom’s secure environment (https://reseller.enom.com). Beginning June 15, 2010, anytime a Reseller passes credit card details to eNom, the Reseller will need to ensure these credit card details are directed to our secure environment (https://reseller.enom.com).

 

Details about the process changes are described below.

 

Current Process

 

eNom Resellers have the option of routing financial related commands to one of two servers:

 

http://reseller.enom.com

https://reseller.enom.com

New Process

 

On June 15, 2010, eNom will stop accepting credit card details through http://reseller.enom.com.

 

Credit card details sent through this non-secure environment will fail. All financial transactions that include credit card information will need to be routed to https://reseller.enom.com. Please note that eNom will deploy this modification to our Reseller Test environment (https://resellertest.enom.com) on April 15, 2010.

 

The following eNom API commands that could include credit card details are below:

 

CREATEACCOUNT

EXTEND

EXTENDDOMAINDNS

PURCHASE

PURCHASEHOSTING

PURCHASESERVICES

REFILLACCOUNT

RENEWPOPBUNDLE

RENEWSERVICES

TP_CREATEORDER

TP_SUBMITORDER

UPDATEACCOUNTINFO

Reseller Action Required

 

Based on this modification, we are requesting all eNom Resellers do the following:

 

1. Check if you are directing credit card data to eNom through http://reseller.enom.com for the above commands.

2. If yes, you will need to redirect these commands to the secure environment at: https://reseller.enom.com

3. You will need to have this change completed by June 15th, 2010 for the above commands.

Link to comment
Share on other sites

  • WHMCS CEO

As Redsign pointed out, this change only applies to calls including credit card details which none of the WHMCS' calls do. However, all communications with Enom from WHMCS are already done using SSL since they contain your Enom username & password aswell as clients information that we feel also needs protection.

 

Matt

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated