urgent..no delivery worried about account

bitemebankers

More info on PCI DSS:

https://www.pcisecuritystandards.org/

http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard

http://www.visaeurope.com/aboutvisa/security/ais/resourcesanddownloads.jsp

DrScotsman

What you have pointed out bmb while interesting (thanked ), is not a technical barrier. It means that legitimate businesses are very unlikely not to use a 3rd party checkout as it would cost too much. It doesn't mean that it is technically impossible to have a website using SSL that just stores your card details on their hard drive - they'd be breaching these rules of course, but we all know how many phishing websites pop up every day that break thousands of laws and rules.

(Although it sounds like you understand that, so sorry for being redundant )

WaveyDave_2

Agree completely with DrScotsman, the use of a padlock does not in itself guarantee the security of your card information. Many sites use SSL for non-financial data. Just because a site uses SSL, it does not guarantee that your transaction is safe, you can buy an SSL cert for <£200.

bitemebankers

It doesn't mean that it is technically impossible to have a website using SSL that just stores your card details on their hard drive - they'd be breaching these rules of course, but we all know how many phishing websites pop up every day that break thousands of laws and rules.

Sure - I am assuming the website the OP visited is at least nominally above board, and not a phishing website. It's worth making the point that it is still possible to be scammed when buying online, and that best practices still apply as regards checking out any company you plan to spend money with. I don't think your point is redundant at all.

Personally, before spending real money online, I like to give the company a phone call and ask them a question or two about the product, or delivery times, or whatever, even if I already know the answer. You can tell a lot from a quick call.

edgex

DrScotsman wrote: »

What you have pointed out bmb while interesting (thanked ), is not a technical barrier. It means that legitimate businesses are very unlikely not to use a 3rd party checkout as it would cost too much. It doesn't mean that it is technically impossible to have a website using SSL that just stores your card details on their hard drive - they'd be breaching these rules of course, but we all know how many phishing websites pop up every day that break thousands of laws and rules.

(Although it sounds like you understand that, so sorry for being redundant )

ah, but you can now use the extra layer of security provided by visa & mastercard;
Verified by Visa or MasterCard SecureCode

these use a password you have setup with the provider of your card, so usually your bank, & the screen that is presented is directly from their system, not the retailers.


i really wouldnt be surprised if processing of payment details isnt taken out of the hands of online retailers completely, & ends up operating like chip&pin does, where the retailer dosnt see any of the information at any point, & the end system, the user interface, is controlled by the payments provider.