News for hackers. Stuff that matters.

A comment on Amazon Confirms EC2/S3 Not PCI Level 1 Compliant. Parent comment

Re:Amazon Confirms EC2/S3 Not PCI Level 1 Compliant by mgrouchy on Monday August 17, 2009 @08:00AM (#767886)
One reason why a company would want to store credit card data is to make it easier for returning customers to purchase things. Besides the fact that I am paranoid, the reason why I don't keep my cc data with amazon is that I know that if I log into my amazon account and all it takes is 1 click for me to buy something I will be even poorer than I already am in no time.

People buy more stuff when you reduce the barriers of entry on a purchase.

Why you would store CC data in the cloud, that I don't know, but I guess if it was a secure and reliable service,why not?

[ Parent | on HN ]
Re:Amazon Confirms EC2/S3 Not PCI Level 1 Compliant by bensummers on Monday August 17, 2009 @08:06AM (#767896)
If you want to do recurring payments, gateways will give you a transaction ID you can store instead of the CC number. Then, when you want the next payment, you give them the ID and ask for more money.

You don't have to store the details at all, but you can do everything through your site without handing the user off to a third party.

[ Parent | on HN ]