3 ms·
A well-designed app offloads the "enter your payment details" dialog to the processor (e.g.: Stripe), but many shops don't. You're handing off your details to t
by smileybarry 3y ago
A well-designed app offloads the "enter your payment details" dialog to the processor (e.g.: Stripe), but many shops don't. You're handing off your details to the vendor's website, which then promises to process your payment with Payments R Us. But (A) I can't be sure of that, (B) maybe their forwarding/processing method is insecure and (C) maybe their server is already compromised and a man in the middle will save my card details.
Compared to PayPal that are a clear redirection in-browser and result in the vendor getting (at most) a "payment cookie" that can be completed to transfer X USD from Y to Z. Or Apple Pay where your (ephemeral) payment details are E2EE to the payment processor's server, even if they go through the vendor's website/servers.