---
schema_version: "1"
id: a139f3542674bcc35081f96ec21abb1c05f24f5504167e7c82fb30a18458244d
title: Secure Communications in B2C Commerce
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_secure_communications.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_secure_communications.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 64438b4df61d3d8c276b6fa2ac87cb62ea198a4e023ce5130a69bcf945b6e11d
description: Secure communications are crucial to prevent attackers from reading or changing sensitive information, for example, credit cards, personally identifiable information (PII), and credentials. Within Salesforce B2C Commerce, you can secure these interactions using the following secure protocols.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Secure Communications in B2C Commerce

Secure communications are crucial to prevent attackers from reading or changing sensitive information, for example, credit cards, personally identifiable information (PII), and credentials. Within Salesforce B2C Commerce, you can secure these interactions using the following secure protocols.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
      <colgroup>
        <col>
        <col>
        <col>
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d159762e38">Interaction</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d159762e41">Between...</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d159762e44">Via...</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="Interaction" class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e38 ">Storefront</td>

          <td data-label="Between..." class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e41 ">Shoppers and your storefront.</td>

          <td data-label="Via..." class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e44 ">Transport Layer Security (TLS)</td>

        </tr>
        <tr class="">
          <td data-label="Interaction" class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e38 ">Business Manager</td>

          <td data-label="Between..." class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e41 ">
            <p> Users and Business Manager.</p>
            <div class="slds-box slds-box_x-small slds-theme_shade slds-m-top_medium slds-m-bottom_medium">
              <div class="slds-media slds-media_responsive">
                <div class="slds-media__figure"><span class="slds-icon_container slds-icon_container_circle slds-icon-note-note"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/images/icon_note.png" alt="Note"></span></div>
                <div class="slds-media__body" style="padding-top:.5rem;padding-bottom:.5rem;"><span class="slds-text-title_caps">Note</span> This interaction is always secured by the
                  site and doesn’t require a separate configuration.</div>
              </div>
            </div>
          </td>

          <td data-label="Via..." class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e44 ">TLS</td>

        </tr>
        <tr class="">
          <td data-label="Interaction" class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e38 ">Web Services </td>

          <td data-label="Between..." class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e41 ">Your instance and an external web service.</td>

          <td data-label="Via..." class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e44 ">Simple Object Access Protocol (SOAP) over TLS, HTTPS, Secure File Transfer
            Protocol (SFTP)</td>

        </tr>
        <tr class="">
          <td data-label="Interaction" class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e38 ">File Upload</td>

          <td data-label="Between..." class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e41 ">Your instance and an external system.</td>

          <td data-label="Via..." class="slds-cell-wrap" style="vertical-align:top;" headers="d159762e44 "> WebDAV over TLS (recommended), HTTPS, SFTP </td>

        </tr>
      </tbody>
    </table>

- **[HTTPS / TLS in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_http_tls.htm&release=264.0.0&type=5)**  
    In HTTPS, the communication protocol is encrypted using transport layer security (TLS) or its predecessor, secure sockets layer (SSL). The protocol is also often referred to as HTTP over TLS, or HTTP over SSL.
- **[Web Services in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_web_services.htm&release=264.0.0&type=5)**  
    Salesforce B2C Commerce provides a web services framework that helps you manage calls to web services and analyze service performance. You need custom code to interact with a web service. We recommend that you use secure protocols as web service types, such as HTTPS, Secure File Transfer Protocol (SFTP), and Simple Object Access Protocol (SOAP) over Transport Layer Security (TLS). A web service can also use a service credential, such as username and password, to perform HTTP basic authentication.
- **[Data Upload in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_data_upload.htm&release=264.0.0&type=5)**  
    Data upload refers to transferring data files from an external system to your instance’s file system. Upload data such as import files, images, and snapshots manually or programmatically. Use Business Manager to transfer data manually. As always, any interaction with Business Manager occurs over HTTPS. Custom code performs data transfer programmatically. In this case, while several file transfer protocols are supported, use only the secure protocols: WebDAV over Transport Layer Security (TLS) (recommended), HTTPS, or Secure File Transfer Protocol (SFTP).
- **[Code Upload in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_code_upload.htm&release=264.0.0&type=5)**  
    Upload custom code, also known as cartridges, to an instance using UX Studio, or with a file transfer mechanism such as WebDAV over Transport Layer Security (TLS). It’s important that you secure code uploads. Follow these best practices.