On Wed, 9 Nov 2011 10:26:19 -0800
Carol Bolger wrote:

> I am developing an application where the user will be ordering a custom
> product. I need to get their credit card, shipping, etc. What is the best
> practice for collecting this information securely.

Best practice and PCI compliance don't always match up, but the latter
is what you need along with audits if you handle the data yourself
rather than passing it off.

The easiest ways of getting PCI compliance whilst avoiding the audits
are to use a service like paypal, google checkout or integrating
something like worldpay into your website.

With worldpay or other even cheaper ones you can get the cost per
transaction down but you may need fraudulent transaction insurance and
the odd paracetamol.


-- 
You received this message because you are subscribed to the Google Groups 
"Android Discuss" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/android-discuss?hl=en.

Reply via email to