Came across this article:

http://www.theregister.co.uk/2011/09...ts_paypal_ssl/