News for hackers. Stuff that matters.

A comment on Encrypted web traffic now exceeds 90%. Parent comment

Re:Encrypted web traffic now exceeds 90% by SlowRobotAhead on Friday November 01, 2019 @01:59PM (#21421869)
You're right, but didn't have to. This guy when he could get past being mad at me knew that was against the rules. Also even if it was allowed, no one wants to shop at a place that says Not Secure.

Side topic, but I've been trying to explain to our terrible CFO for years that PCI / PCI DSS is a real thing. He thinks that's the type of regulation that only giant companies have to deal with.

[ Parent | on HN ]
Re:Encrypted web traffic now exceeds 90% by toomuchtodo on Friday November 01, 2019 @02:33PM (#21422243)
Feel free to report your org to your merchant processor if necessary if you're not meeting compliance requirements and think you can get away with it without compromising yourself.
[ Parent | on HN ]
Re:Encrypted web traffic now exceeds 90% by icedchai on Friday November 01, 2019 @02:45PM (#21422370)
Even if it says "secure", that doesn't mean it really is. I worked at a place in the 90's that hosted a some sites taking credit cards through HTTPS. You know what they did? They sent emails, in clear text, to people at the store that would enter / process the cards manually.
[ Parent | on HN ]