News for hackers. Stuff that matters.
Re:Linode hacked, CCs and passwords leaked by ams6110 on Monday April 15, 2013 @03:08PM (#5553525)
No. Customer sends Stripe their CC number, via AJAX in the browser. Acme, Inc. never has it even transiently. Stripe return a token to the browser, which is sent in a POST to Acme, Inc., then they verify it server side with a private API key.

Edit: yes Stripe has your number, but since their sole business is about securing that information, they probably do a better job of it than your typical online merchant.

There are no comments on this comment yet.