13337: Gather: callback must be over HTTPS when using gather with PCI compliance
VOICE
ERROR
This error occurs when a <Gather> action callback used in a PCI workflow is not served over https://. Twilio requires a secure webhook endpoint for this flow, and Twilio won't connect to an HTTPS URL with a self-signed certificate.
- The
<Gather>actionURL useshttp://instead ofhttps://. - The callback endpoint uses an HTTPS certificate that Twilio cannot trust, such as a self-signed certificate.
- Update the
<Gather>actionURL to usehttps://and make sure the URL is valid. - Use a trusted TLS certificate on the callback endpoint. Do not use a self-signed certificate.
- If you are collecting PCI-sensitive data, enable PCI Mode for the account in Voice settings before using PCI workflows.