> So in a world where PCI-DSS isn't a thing, you're fine entering your credit card data directly on the forms available on random websites? Yes. It might be a

> So in a world where PCI-DSS isn't a thing, you're fine entering your credit card data directly on the forms available on random websites? Yes. It might be a hassle should someone misuse it, but the status-quo effectively means if I didn't make the purchase I'm not responsible for it. More importantly, this was proven before PCI-DSS was a thing.