[Date Prev][Date Next][Thread Prev][Thread Next][Interchange by date
][Interchange by thread
]
[ic] Payment Processing and PGP
Quoting Fred Pope (fred@satcomresources.com):
> //
> // IC 4.8.3 / RH 7.2 / MySQL / Verisign Pay Flow Pro
> //
>
> A site we are working on is currently running a PayFlowPro with IC 4.8.3 and
> want to include the PGP credit card information on the order page that is
> sent to the ORDERS_TO recipient. The card processing is handled by the
> verisign client, but in case something goes wrong, we would like to be able
> to have the card number for manual credits, adjustments etc.
>
> Does anyone see a significant security risk in doing this?
>
> Has anyone done this?
Yes, I do it all the time. If you have PGP enabled, it shows up in
$Values->{mv_credit_card_info}.
> --
> Fred Pope
> Satcom Resources
> 970-748-3094
> fred@satcomresources.com
> http://www.satcomresources.com
>
> CONFIDENTIAL CONTENTS WARNING
>
> This message is intended only for the use of the individual or entity to
> which it is addressed and may contain information that is privileged,
> confidential and exempt from disclosure under applicable law. If the reader
> of this message is not the intended recipient, or the employee or agent
> responsible for the delivering the message to the intended recipient, you
> are hereby notified that any dissemination, distribution or copying of this
> information is strictly prohibited. If you have received this communication
> in error, please notify us immediately by telephone and delete the original
> message. Thank you. Satcom Resources LLC. 970-748-3094
>
I think you blew the confidentiality thing when you posted to a public mail
list. 8-)
--
Red Hat, Inc., 3005 Nichols Rd., Hamilton, OH 45013
phone +1.513.523.7621 <mheins@redhat.com>
If you think nobody cares if you're alive, try missing a couple of
car payments. -- Earl Wilson