4 ms·
Wow, this is really bad. With all the discussions revolving around the more advanced side of SSL for non PII something like this, which violates PCI and other
by arielm 12y ago
Wow, this is really bad.
With all the discussions revolving around the more advanced side of SSL for non PII something like this, which violates PCI and other requirements, simply goes unnoticed.
I wonder if the person deploying this warned the company and the higher ups just ignoring him/her...
- cmelbye 12y agoWouldn't it be that persons job to advocate for SSL? I can't imagine it's that hard to sell "bank-level encryption to prevent a Target-like credit card leak" to the higher ups, especially at a company as relatively tech-forward as Starbucks.