Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 07 Sep 2004 08:49:14 -0600
From:      "FreeBSD Mail Lists" <freebsd@untoldfaith.com>
To:        Questions <freebsd-questions@freebsd.org>
Cc:        Peter Risdon <peter@circlesquared.com>
Subject:   Re: Update Databases from Webserver
Message-ID:  <9c08c42717771b148b9fed3e1aa1f7d2@untoldfaith.com>

next in thread | raw e-mail | index | archive | help
Peter,
Thanks for your response.
In response to
> You don't say why you'd want to do this. If you want to allow customers 
> of an e-commerce site to avoid repeating their details whenever they 
> want to buy, perhaps consider basing the payment backend around PayPal. 
> The need for users to authenticate in order to make a payment hasn't 
> brought e-Bay to its knees.

Pretty much the end result would be Amazon like with the customer being able to choose a previously used card.  Is this possible without storing credit card numbers or using paypal?

Anyway thanks everyone for their replies thus far any input helps.

-Troy

-----Original message-----
From: Peter Risdon peter@circlesquared.com
Date: Tue,  7 Sep 2004 07:18:22 -0600
To: FreeBSD Mail Lists freebsd@untoldfaith.com
Subject: Re: Update Databases from Webserver

 
> I'm afraid the awful truth is that if you need to ask this question 
> here, you shouldn't be storing other people's credit card details on 
> your server.
> 
> 
> If you want to use the numbers to confirm identity or something, you 
> could store an encrypted version of the number and use that for comparison.
> 
> But to start storing plaintext CC details on your system without being 
> deeply expert in all the security issues raised would be very dangerous. 
> And the high degree of monitoring needed for such a system would make it 
> uneconomical without commensurately high volumes of business.
> 
> Peter.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9c08c42717771b148b9fed3e1aa1f7d2>