News for hackers. Stuff that matters.

A comment on Is it OK to hold credit card numbers in cookies, Santander?. Parent comment

Re:Is it OK to hold credit card numbers in cookies, Santander? by TomGullen on Monday October 15, 2012 @05:48PM (#4657314)
I don't trust a site that stores my CC information in a cookie to always serve HTTPS pages.

Also you didn't address the most important point, PCI compliance.

The method Santander employs is unquestionably a bad way to do things.

[ Parent | on HN ]
Re:Is it OK to hold credit card numbers in cookies, Santander? by snikch on Monday October 15, 2012 @06:20PM (#4657428)
If the cooke is set to secure it won't be sent in a non https request.
[ Parent | on HN ]