If the browser hosting your Flex component is connected in a HTTPS session, then yes. I'm not aware of being able to start HTTPS communication from a HTTP session. I believe that the SSL key (session in place) needs to be in-place before you do your submit so posting blindly to a HTTPS URL is not necessarily secure.
Of course, the ugly solution, a popup HTML window doing HTTPS directly. You can also encrypt yourself in Actionscript with as3crypto (Google code) although this might violate PCI/SET standards. In Air, you can start an HTTPS session of its own. KFB From: [email protected] [mailto:[email protected]] On Behalf Of Scott Sent: Wednesday, March 04, 2009 8:24 AM To: [email protected] Subject: RE: {Disarmed} RE: [flexcoders] Credit card processing in Flex I plan on having the server process the credit card order. However, I still have to pass the credit card information securely to my server. The other response refers to sentourl so I'll look into that. Is there any other methods to send information securely to my server? sj ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Kevin Benz Sent: Wednesday, March 04, 2009 10:00 AM To: [email protected] Subject: {Disarmed} RE: [flexcoders] Credit card processing in Flex I would look at the authorize.net documentation as they present the most generic methods for HTTP based authentication. If you are talking about a client-side processing solution, it can be accomplished but a bad idea. SWF's can be easily reverse engineered exposing API keys, hash entries, merchant account identities and credentials to external access. Traditional non-API Wallet approaches (standard PayPal, Amazon FPS, Google Wallet) cannot exist in a client only solution as they require a post-back URL with which to transact. The only secure solution has a server acting as a gateway to the payment service with the Authorize.net documents providing many resources. Other payment aggregators offer likewise documentation such as Cybersource, Paypal (both Wallet and API). A server hides the specifics (code and metadata) from the peering eyes of those interesting in subverting your payment service. KFB From: [email protected] [mailto:[email protected]] On Behalf Of Scott Sent: Wednesday, March 04, 2009 7:09 AM To: [email protected] Subject: [flexcoders] Credit card processing in Flex Anyone have a website or information that references how to process credit cards through flex? Thanks Scott -- This message has been scanned for viruses and dangerous content by MailScanner <http://www.mailscanner.info/> , and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner <http://www.mailscanner.info/> , and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner <http://www.mailscanner.info/> , and is believed to be clean.
<<image001.jpg>>
<<image002.jpg>>
