FN-FORUM:

date posted 20th July 2005 15:11

One of the companies I work for has requested a facility for customers to store
their credit card details on line and be able to select a card to use in the
same way as is familiar on Amazon, and every other major player in the
e-commerce business.

This is not my area at all, but Im just wondering if anyone's familiar with the
security measures required to implement this, or legal issues regarding this.
Obviously it can be done as all the big players do it somehow, but not by
storing card numbers basically unencrypted on a web server only a username and
password or two away? Surely there's something more to it than that..

Thanks for any feedback,
Matt.