Forum Moderators: phranque
PayPal is great and I have no complaints other than that they need to hire more phone tech people so I don't have to wait so long.
If you have your own physical terminal, you can dispense with all of those by getting a secure server and get a programmer to write your ordering script admin so that it can use gpg to store the CC number in an encrypted format. With gpg, the data is encrypted by a public key and simply cannot be decryted without the private key, which you keep OFF your site and in a secure location. When you retrieve the order, you submit the private key, the data is decrypted, and you run the CC number namually. The CC data is then deleted entirely at that point.
