>OK then encrypt the credit card number + merchant ID That would be significantly better. >Although even a single key pair for each card network would still b

>OK then encrypt the credit card number + merchant ID That would be significantly better. >Although even a single key pair for each card network would still be better than the status quo, wouldn't it? If it gives people the impression that they no longer need to even try to protect their infrastructure because the card numbers are already encrypted, then yes.