RE: FN-FORUM: PCI DSS Merchant Compliance -(All sites have to comply by June 30, 2005)

date posted 30th July 2005 20:59

Is there any problem with having PGP encrypted mails sent ?

Cheers
Andy

-----Original Message-----
From: [EMAIL REMOVED] [EMAIL REMOVED] On Behalf Of Paul
Civati
Sent: Saturday, July 30, 2005 9:12 PM
To: Andy Macnaughton-Jones
Subject: Re: FN-FORUM: PCI DSS Merchant Compliance -(All sites have to
comply by June 30, 2005)


craig - freelance web designer [EMAIL REMOVED] wrote:

> {{THE PICTURE}}
> My client owns a high street shop and requires an online e-shop to=20
> support the shop sales. He has made it clear that he doesn't want to=20
> use paypal or a worldpay system, as he has a merchant account which he

> uses in the shop.

AIUI, the merchant account the bank will have issued for the shop will
be for customer present and telephone sales. I don't think the bank
would generally be too pleased with you taking internet based orders and
manually processing them (yes I know there are people doing this),
you're supposed to obtain a separate internet merchant account for that.

Unless things have changed.

> {{MY HOSTING PROVIDER STATES}}
> Accepting online payments via credit card must be done securely. It is

> not adequate to take credit card details via SSL then to email the=20
> results to yourself or the administrator. There are at least three=20
> issues with this method:

Good to see people taking a sensible approach to card security.

Yes, what is the point of transmitting card details over SSL and then
transporting them in cleartext non-SSL SMTP. Potentially ending up with
card details stored unsecured in mail queues and perhaps bouncing around
when email systems don't quite work as they should.

-Paul-

--
Paul Civati 0870 321 2855
Rack Sense Ltd - Managed/Business hosting - www.racksense.com =20
RackRed - Value SSL certificates and servers - www.rackred.com


--=20
Freelancers, contractors earn more with Prosperity4
Call 0870 870 4414 or visit www.prosperity4.com
and benefit from Inland Revenue approved expenses today.

To advertise here: http://www.freelancers.net/advertising.html