Page 1 of 1

SSL and Credit Cards

Posted: Fri May 29, 2009 8:21 am
by Cornerstone
If our store is going to be using Credit Cards as the primary source of payment MUST SSL be active to do this?

Thanks.

Re: SSL and Credit Cards

Posted: Fri May 29, 2009 8:37 am
by mazhar
This question is more related to your payment processor. It would be a requirement of your payment processor that they require SSL or not.

Re: SSL and Credit Cards

Posted: Fri May 29, 2009 9:05 am
by nickc
Can you process credit cards without your website using SSL? It is physically possible.
Should you? Hmm. Would you use your own credit card at an online store that didn't use SSL? I wouldn't. I'm guessing that neither will most of your potential customers.
Any credit card company could also immediately fine you for violating PCI rules. That's like $50,000 for starters.

So, no business accompanied by heavy fines. Seems like a bad idea. :)

Re: SSL and Credit Cards

Posted: Fri May 29, 2009 12:41 pm
by Logan Rhodehamel
Cornerstone wrote:If our store is going to be using Credit Cards as the primary source of payment MUST SSL be active to do this?
Yes. To collect card information without SSL enabled would be fundamentally irresponsible. SSL certificates can be had for under $100.

Re: SSL and Credit Cards

Posted: Fri May 29, 2009 12:51 pm
by Cornerstone
We purchased a SSL and have it setup. I was just making sure we had to have it before moving forward.

Thanks!