question

ecoatm avatar image
0 Likes"
ecoatm asked

Why is eBay using SHA1 for verification when it's been deprecated for years?

Why is the notification API using ECDSA-SHA1 for signature verification when SHA1 is considered insecure and has been deprecated for several years? I'm working on an integration for our Salesforce instance with the Marketplace Account Deletion and Salesforce doesn't support ECDSA-SHA1 verification, it supports ECDSA-SHA256, 384, and 512.


Is there a way to get/request a higher level of encryption hash for these calls? If not, I'm not sure how to even complete a Salesforce/eBay integration at this point.

marketplace account deletion notification endpointgetpublickey
10 |600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

0 Answers

· Write an Answer

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.