3 ms·

And you can accomplish the same thing by using an iframe that you have full control over. Instead, if you use this service, you're trusting another 3rd party s

And you can accomplish the same thing by using an iframe that you have full control over. Instead, if you use this service, you're trusting another 3rd party site to be available and to not be compromised.

tptacek 14y ago
That is true, but the point is that the only thing that is going to be compromised is the data that would be going to Stripe. I know it is shocking to many of you to hear this, but the data Stripe collects is not really the most sensitive information on the Internet. The point of the iframe is to contain the damage from any possible compromise. If PAYMENTIFRAME.COM is insecure (heh), you still aren't going to lose user sessions to your actual application.
- JSadowski 14y ago
  No, just potentially their credit card information.
  - tptacek 14y ago
    Again: that is not always the most sensitive things users have. I give my credit card to random people who work at gas stations. I do not give them passwords.
    - JSadowski 14y ago
      Just because it isn't most-sensitive doesn't mean that breaching the data isn't a problem.