3 ms·
Really nice idea, nice work man. There's just one thing though that worries me unless I misunderstand how it's all setup. But I noticed your popup where you en
by DigitalSea 14y ago
Really nice idea, nice work man. There's just one thing though that worries me unless I misunderstand how it's all setup. But I noticed your popup where you enter credit card details is being displayed on a non-https encrypted page. Are credit card details safe to enter, are they encrypted in any way? I could be wrong and you could be using something like Stripe or a 3rd party payment API, I wanted to enter my credit card details to test it all out but was worried.
- scottmotte 14y agoYes, I am using stripe via its stripe.js api so it is secure. (but if the little app proves popular I will invest in using https or at the very least piggy back on heroku's https)
- melvinram 14y agoEven with Stripe, you should use SSL as per their info page: https://stripe.com/help/ssl https://stripe.com/help/ssl
- scottmotte 14y agoDefinitely agreed, but PCI-compliance wise I 'pass' with the current setup going through stripe.js. But nonetheless, I agree it is a must have for any legitimate site.
- fatalerrorx3 14y agoI think most non-tech people wouldn't know that you were using stripe, and would abandon the site at the point of sale (but I could be wrong). Me being a tech person, I would still abandon the site after not seeing an SSL connection, in my opinion it's not worth it to not have one