Another way to achieve PCI compliance is to simply outsource all activities having to do with credit cards to a PCI compliant vendor and let them deal with that

Another way to achieve PCI compliance is to simply outsource all activities having to do with credit cards to a PCI compliant vendor and let them deal with that pain. I've seen sites that let you pay this way and it works pretty well - as well as a payment workflow that involves sending your customer to a 3rd party site and hoping they make it back can work anyway. The whole thing with the modem is scary though.