I am simply pointing out that unlike what is covered in the Stripe documentation, a merchant is not absolved of PCI compliance by simply implementing Stripe.js

I am simply pointing out that unlike what is covered in the Stripe documentation, a merchant is not absolved of PCI compliance by simply implementing Stripe.js in their HTTP response & turning on SSL/TLS. The PCI DSS and related materials cover this fact quite well. This "dispute" if you could even call it that came about when Pete Keen inadvertently also over simplified the compliance issue in one of his posts, for which he has since rectified: https://www.petekeen.net/life-of-a-stripe-charge https://www.petekeen.net/life-of-a-stripe-charge Subsequent discussion here: https://news.ycombinator.com/item?id=7091788 https://news.ycombinator.com/item?id=7091788