Have you heard of PA-DSS?

[Sam Hamilton]

I had never heard of PA-DSS until I bumped into this blog post - 
http://www.merchantaccountblog.com/735/pa-dss-and-you-thought-pci-was-a-mess
Its scary beast that has the potential to rip the heart out of open 
source e-commerce if the credit card companies come down hard requiring 
this.
If you use the ecommerce app I would have a good read of this.
Sam