[ic] Payment Processing and PGP

Fred Pope interchange-users@interchange.redhat.com
Tue Jan 29 12:59:00 2002


//
// IC 4.8.3 / RH 7.2 / MySQL / Verisign Pay Flow Pro
//

A site we are working on is currently running a PayFlowPro with IC 4.8.3 and
want to include the PGP credit card information on the order page that is
sent to the ORDERS_TO recipient. The card processing is handled by the
verisign client, but in case something goes wrong, we would like to be able
to have the card number for manual credits, adjustments etc.

Does anyone see a significant security risk in doing this?

Has anyone done this?
--
Fred Pope
Satcom Resources
970-748-3094
fred@satcomresources.com
http://www.satcomresources.com

CONFIDENTIAL CONTENTS WARNING

This message is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged,
confidential and exempt from disclosure under applicable law. If the reader
of this message is not the intended recipient, or the employee or agent
responsible for the delivering the message to the intended recipient, you
are hereby notified that any dissemination, distribution or copying of this
information is strictly prohibited. If you have received this communication
in error, please notify us immediately by telephone and delete the original
message. Thank you. Satcom Resources LLC. 970-748-3094