Regarding 1, it actually does post the payment over HTTPS via javascript directly to the payment processor from your browser. I wasn't really trying to do a co

Regarding 1, it actually does post the payment over HTTPS via javascript directly to the payment processor from your browser. I wasn't really trying to do a controlled experiment, otherwise I would have done the other things you describe.