Hello,

Here are some thoughts and questions from the perspective of a developer working with small businesses. What are the safest and most cost effective payment gateways for Satchmo that accept credit cards without requiring the costumer to create an account? Braintree and Stripe seem to be a step in a better direction but something like paypal or webpay might be even safer.

Accepting only standard paypal could lower conversions because some costumers are not willing to open a paypal account. I think there might be a paypal service that provides an embedded checkout page with a credit card form. Webpay might be another option and I understand it uses an Iframe but from the comments I read, opening an account is not required of the costumer.

Unfortunately if a site is compromised, the criminal can point the checkout to a fake payment gateway, quietly collect the card info etc...
What are the options to prevent liability and get alerts in such situations?

It would be interesting if there was a separate low cost system (as in setup, maintenance, price and other costs) that checked for file modifications and sent out alerts when the site/satchmo app got compromised. Its possible to have something very nice if one trows a lot of time and/or money in to this problem, but what are the less expensive outsourced options?

Are the cloud app platforms like heroku, dotcloud, Gondor helpful in this situation or is a dedicated server still the best way to go? Are there ecommerce friendly, security focused Django/Satchmo managed dedicated servers and/or services out there?

Thank you for your comments.
Orion

--
You received this message because you are subscribed to the Google Groups "Satchmo 
users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/satchmo-users?hl=en.

Reply via email to