Re:Amazon Confirms EC2/S3 Not PCI Level 1 Compliant
by seriouslyrad on Monday August 17, 2009 @05:16AM
(#767697)
I was about to point out what other people have too, why would you store CC data? and if you did, you wouldn't even consider storing it in the cloud anyway.
[ Parent
| on HN ]
Re:Amazon Confirms EC2/S3 Not PCI Level 1 Compliant
by mgrouchy on Monday August 17, 2009 @08:00AM
(#767886)
One reason why a company would want to store credit card data is to make it easier for returning customers to purchase things. Besides the fact that I am paranoid, the reason why I don't keep my cc data with amazon is that I know that if I log into my amazon account and all it takes is 1 click for me to buy something I will be even poorer than I already am in no time.
People buy more stuff when you reduce the barriers of entry on a purchase.
Why you would store CC data in the cloud, that I don't know, but I guess if it was a secure and reliable service,why not?
Re:Amazon Confirms EC2/S3 Not PCI Level 1 Compliant
by bensummers on Monday August 17, 2009 @08:06AM
(#767896)
If you want to do recurring payments, gateways will give you a transaction ID you can store instead of the CC number. Then, when you want the next payment, you give them the ID and ask for more money.
You don't have to store the details at all, but you can do everything through your site without handing the user off to a third party.