|
|
Question : Submit credit card data non secure page post to ssl?
|
|
I have a client who would like to have an ajax popup if their credit card data is needed. Traditionally I would collect and post data on secure pages. however in this instance the ajax popup will be on an unsecure page. What security implications am I looking at posting data from an unsecure page (credit card number) to a secure page?
The more I think about it it seems alright but I just dont want to take chances and have not been asked to do this before.
|
Answer : Submit credit card data non secure page post to ssl?
|
|
In the developer's point of view, the more secure the better. Things such as credit card numbers you probably won't want to take any chances and risks on, as it is valuable data and customers need assurance that when they are entering their credit card number, they are on a secure page and the data is somewhat encrypted for security.
You may want to look at this, which could be helpful information if the client insists on having an ajax popup: http://ajaxian.com/archives/assl-ajax-secure-service-layer
Hope this helps!
|
|
|
|