RE: Credit Card Details & Processing

This message was sent from: E-Commerce Laws
http://forums.oscommerce.com/viewtopic.php?p=212506#212506
----------------------------------------------------------------

First of all collect CC# over SSL connection

There is a mod that split the card number in to two - 1/2 is emailed to the shop owner - not a problem as only 1/2 is sent (some one packet niffing and looking at the emails would still have to plug in the other missing 6-8 numbers - which had 1 millon to 100 millon possable combinations).  You could also use PGP to encript (uses a 4096 bit encription - better than SSL) your server email to the store owner - so even that would be unreadable.

The other 1/2 is stored on the server - get that over SSL - even if somehow some one broke into the server - they only have 1/2 of all CC numbers with the same amount of possable combinations as stated above.


Manually combine the 2 halfs and process off line as you do normally like with your phone transactions.

If you want it anymore secure than that - the simplest way is to accept  CASH ONLY.  However that only works in face to face transactions