Setting Up Your Server
Set up your server for secure communications with Apple Pay.
These are the requirements for incorporating Apple Pay on your website:
All pages that include Apple Pay must be served over HTTPS.
Your domain must have a valid SSL certificate.
Your server must support the Transport Layer Security (TLS) 1.2 protocol and one of the cipher suites listed in the following table.
Cipher suite value
Whitelist Apple Pay IP Addresses for Merchant Validation
To enable merchant validation and receive a session object, your server must allow access over HTTPS (TCP over port 443) to the Apple Pay IP addresses and domains provided in Listing 1.
For more information about merchant validation, see Providing Merchant Validation.