4 ms·

I tried to donate to this, but 1. The popup to donate shows up on a page where the URL is not https. This looks wrong, but closer inspection shows that it is a

by azakai 13y ago

I tried to donate to this, but 1. The popup to donate shows up on a page where the URL is not https. This looks wrong, but closer inspection shows that it is an iframe that is in fact properly secured. But had I not known how to find that out (right-click, show page info), I would not enter my credit card info on a non-https site. 2. My card was declined, the first time in my life that that has ever happened. I triple-checked the information I entered and it is valid. Could be my fault, but given I've never had a problem before, perhaps an issue with the site? Based on those two things, this project might be missing out on some amount of donations (at least mine, since I don't have another card to try). Hopefully that's fixable.

smtddr 13y ago
Personally, I think that's a web UI design flaw where the page loads non https but a credit-card form has a POST as https. Also, I'm kinda concerned that vice-versa could happen. I wish browsers had a feature to detect what appears to be a form asking for sensitive info and let me know if the POST will happen over https or not. Basically, stop me from proceeding anytime a form is about to submit containing a field of 16 digits with some kind of modal warning dialog.
bullfight 13y ago
On point 2 I went through the same thing. Your card was declined because these donations are being routed through the Travis Foundation's Stripe account which is now based in Germany. As an international org based in Germany your bank/cc flagged the transaction as potentially fraudulent. I don't think Rails Girls/Travis can do much about this, you need to call your bank to get them to allow the transaction.
- azakai 13y ago
  Requiring people to call their bank is a much higher barrier than it should be, though? I buy stuff online all the time and things just work. I hope Rails Girls can use another payment processing solution.

by azakai 13y ago

smtddr 13y ago

Personally, I think that's a web UI design flaw where the page loads non https but a credit-card form has a POST as https. Also, I'm kinda concerned that vice-versa could happen. I wish browsers had a feature to detect what appears to be a form asking for sensitive info and let me know if the POST will happen over https or not. Basically, stop me from proceeding anytime a form is about to submit containing a field of 16 digits with some kind of modal warning dialog.

bullfight 13y ago

On point 2 I went through the same thing. Your card was declined because these donations are being routed through the Travis Foundation's Stripe account which is now based in Germany. As an international org based in Germany your bank/cc flagged the transaction as potentially fraudulent. I don't think Rails Girls/Travis can do much about this, you need to call your bank to get them to allow the transaction.

azakai 13y ago
Requiring people to call their bank is a much higher barrier than it should be, though? I buy stuff online all the time and things just work. I hope Rails Girls can use another payment processing solution.