TLS Security and Communication Settings
We regularly review our security settings and try to find an optimal balance between maximum security and backward compatibility. Due to current developments in communication standards and regulatory requirements, it is nevertheless necessary to make occasional adjustments to our communication endpoints.

SSL Certificates

SSL certificates are used to encrypt the data-transfer between you and the Saferpay payment gateway. As threats grow more frequent and also dangerous, it is necessary to frequently change these certificates.
For most systems, this may not be an issue, however there are cases, where you -the merchant- may be in need of getting said certificates, for example in case of a trust-store, where your system only trusts certificates, that have been added to the trust store.
For further information and a download of all the relevant certificates, please follow this link.

TLS Version

For encrypted communication (HTTPS) with Saferpay, TLS 1.2 must be used as protocol for transport encryption. Unencrypted communication (HTTP) or earlier versions of TLS or SSL are not supported.

Cipher Suites

Furthermore, at least one of the following encryption algorithms (Cipher Suites) must be used to establish a connection to Saferpay:

Outgoing IP Addresses and ports, used by Saferpay

We do not recommend to rely on IP address whitelisting for security reasons as IP addresses can be easily faked by criminals. Experts call this "IP address spoofing".
Please note that the host names and IP addresses listed below may change from time to time on short notice or even without prior notification.
Saferpay uses the standard HTTP(S) ports 80/443 and the following host names:
  • for connecting to the production environment
  • for connecting to the sandbox (test environment)
For HTTP-based messages originating from Saferpay (e.g. transaction result notifications sent from Saferpay to merchant web servers) the following IP addresses are used: