3 ms·
Until they have a security breach.
by gbuckingham89 14y ago
Until they have a security breach.
- ricardobeat 14y agoBetter rely on someone who's sole job is securing that info than doing it yourself.
- mrweasel 14y agoStoring credit card info just helps make you a bigger target. If your a small company, better let someone else store card info, let them be the target. Also you're fined by the credit card companies if you lose card information. I believe it's a per card fine, so it get expensive really quickly. Actually I don't get why any company would choose to store credit card information, when most payment providers will do it for you.
- Killswitch 14y agoStripe is amazing... I trust them, someone hacks me, awesome, you got password hashes and stripe customer keys, all worthless.
- dpeck 14y agoNot exactly worthless, depending on the hack someone could still charge an awful lot to your customers and make you have a bad day. But yes, significantly better than other situations.
- Killswitch 14y agoTrue, but I'd rather fix the problem that got them in, force reset of passwords, and delete all customer keys and require them to create new ones than be like "uhhhh, our data was hacked and your credit card is safely encrypted... But we had the encryption key on the server too, oops"
- fudged71 14y agoBut you still might need to consider data residency issues and making your customers aware of where their data is being stored.
- raverbashing 14y agoYes But if that happens, it's not your responsibility (at least not 100%), it's theirs
- hopeless 14y agoFollowing the traditional responsibility/accountability dichotomy: They are responsible for storing the cc number securely but you are accountable when something goes wrong (because you gave them that task) Much like Linode are responsible for hosting my clients site but I sigh am accountable when something goes wrong.