3 ms·
I'd be loath to put my credit card info there since it's on an HTTP (not HTTPS) page. How is this remotely secure?
by graue 14y ago
I'd be loath to put my credit card info there since it's on an HTTP (not HTTPS) page. How is this remotely secure?
- nick007 14y agoThe page itself is loaded via HTTP, but all credit card information is transferred to Stripe & Helium via HTTPS. Again, with Helium, no payment information actually needs to hit your servers (Sam's blog, in this case).
- bflesch 14y agoI think this is a valid concern. IIRC such payment-related Javascript code should only be included in https:// https:// context as other script code might interact with the payment form.
- zrail 14y agoIt's actually against the stripe Terms of Service to use live mode keys on a non-https site.