News for hackers. Stuff that matters.
Re:New version of Stripe Checkout by ricardobeat on Wednesday April 24, 2019 @12:47PM (#19740247)
Funny that just as 3D Secure and other payment UIs are moving towards being embedded, vs redirect, they decide to go in the opposite direction.
Re:New version of Stripe Checkout by bpicolo on Wednesday April 24, 2019 @12:53PM (#19740312)
They have the embedded option as well: https://stripe.com/docs/stripe-js#stripejs-and-elements

This change seems to solidify the distinction between Stripe-hosted vs self-hosted

Re:New version of Stripe Checkout by dfabulich on Wednesday April 24, 2019 @01:01PM (#19740407)
Elements isn't "embedded Checkout." Elements is "roll your own Checkout using Stripe's UI components."
Re:New version of Stripe Checkout by bpicolo on Wednesday April 24, 2019 @02:16PM (#19741276)
It's more than that. The loaded JS library renders your inputs into iFrame elements (for PCI compliance). So it takes that HTML and embeds it down. Recent PCI changes added different-domain hosting for the form itself as a requirement for compliance, which is why you see providers moving to different sorts of embedding.

https://stripe.com/docs/security#validating-pci-compliance

Re:New version of Stripe Checkout by nailer on Wednesday April 24, 2019 @01:01PM (#19740412)
Anyone got any thoughts on when to use Elements vs the new Checkout?
Re:New version of Stripe Checkout by stickfigure on Wednesday April 24, 2019 @03:07PM (#19741726)
Unless you're a Big Stodgy Corporation that must have exactly your own custom flow, always prefer the Stripe Checkout flow (either new or old) over Elements. Checkout is easier to implement, provides a polished UX, and users are more likely to trust it over your custom flow.
Re:New version of Stripe Checkout by jenanwise on Wednesday April 24, 2019 @01:06PM (#19740471)
We've got a page for that! https://stripe.com/docs/payments
Re:New version of Stripe Checkout by jjevanoorschot on Thursday April 25, 2019 @03:50AM (#19745932)
Use Checkout unless you have a good reason not to. The main benefit is that if there is any large change in regulation (like SCA right now in the EU), Stripe will update Checkout and you will not have to change anything.