|
|
 |
Re: FN-FORUM: PCI DSS Merchant Compliance -(All sites have to comply by June 30, 2005)
date posted 30th July 2005 21:12
Andy Macnaughton-Jones [EMAIL REMOVED] wrote:
> Is there any problem with having PGP encrypted mails sent ?
That is certainly an advisable thing to do if you really *must* do it
via email.
One further thing to consider is that of order verification, for
example with live orders you may record and check the IP address of
the submitter.
One the easiest ways we spot blatantly obvious card fraud is when
the address details of the card holder are say in the US/UK and
the submitting IP is in Indonesia.
-Paul-
--
Paul Civati 0870 321 2855
Rack Sense Ltd - Managed/Business hosting - www.racksense.com
RackRed - Value SSL certificates and servers - www.rackred.com
|
 |
|