3 ms·

Thanks for the detailed reply! There is indeed a lot to do with authentication/authorization (and things like audit logging…). I’ll look more at EnvKey later to

Thanks for the detailed reply! There is indeed a lot to do with authentication/authorization (and things like audit logging…). I’ll look more at EnvKey later to understand the cryptography better. Stripe/other gateways do abstract most of PCI DSS from you, and will not return card data via API calls, so that somewhat sidesteps the compliance issue.

danenania 8y ago
I look forward to hearing your thoughts--feel free to email me directly: dane [at] envkey.com All the crypto/security details are here btw: https://security.envkey.com/ https://security.envkey.com/