#makasmi-payments

1 messages · Page 1 of 1 (latest)

lone prism
#

Hello! Can you clarify what you mean by "submitting card numbers in clear"? Are you just trying to make sure you're PCI complient?

left dune
#

hi , in checkout form we have to write the card number as shown in the following picture

#

So when we submit the form i think we must do something in backend to secure submitted card number..

lone prism
#

This is using Stripe Checkout, right? There shouldn't be anything specific you need to do because we don't send you the raw card number. Your backend will only ever be dealing with the Payment Method objects we create and we (Stripe) handle the raw card details for you

left dune
#

Yes Stripe Checkout.. I asked the question because we have received this notification : "It looks like your current integration sends card details directly to our API rather than securely exchanging them for a client-side representative token first."

lone prism
#

Did you make any payments outside of Checkout?

#

I'd be very surprised if your Checkout payments triggered that notification, so I'd expect that you have other payments that caused this

left dune
#

no i just used stripe cli for local testing ...

lone prism
#

That's very strange then - I'd write in to support (https://support.stripe.com/contact) and ask them to check for which specific requests were using raw card details, since just using Checkout shouldn't be triggered this behavior.