• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Running eCommerce without a secure server

FOBSIDE

Platinum Member
Is this actually illegal or just horridly stupid? If you are taking customer information and credit card information via a form and submitting through a non secure server, is this actually illegal? If so, where can one report such websites?
 
First of all, I am not a lawyer, and I am not giving legal advice.

I'm not sure if it is technically illegal (it would not surprise me, either way), but if you are accepting and storing a credit card number on a non-secure server, it is against Visa/MasterCard policy (and I'm sure the policy of numerous other credit card processors), and I would assume most merchants have similar policies.

If you are not storing the credit card number, though, and are instead only passing the data from your website to your processor, it's generally accepted that a shared environment server is OK, as long as it is using SSL.
 
Back
Top