181–190 of 369 posts
Earlier quoted context omitted.
Anyone know whether they used a documentation tool to generate the 'example on right' style pages? E.g. https://stripe.com/api/docs?lang=python#delete_customer . It's very clean. The general layout and feel of the API doco is great.
It's mostly just a custom thing I wrote. The CSS is mostly taken (with permission) from Jeremy Ashkenas' sites (see Backbone, CoffeeScript, etc.)
Wondering when it will work in Canada? Also, how does it work "without merchant account or gateway" ?
Even though the credit card details never hits the webserver of the host site, does the fact that the fields are on the site rather than in a secure iframe not mean that there's still a PCI issue? Namely that if a malicious party manages to find a way to inject javascript into the page they can read any form field they want, regardless of whether it's being submitted elsewhere. This was true of Braintree (the form po…
This is why your site has to be served over SSL (to prevent MITM attacks), and why you should be careful about what third party content you embed in your site. In particular, you should never embed a non SSL resource on an SSL page (also known as the mixed content warning in most browsers).
What about lock-in? This is awesome for getting started fast, but what happens when you have 100,000 subscribers and you want to switch to Braintree or someone to get some better pricing?
We don't like lock in either, and we'll never use it as a business tactic. If you want to move your stored credit cards to another provider, we'll help you out in doing so. It's a bit tough to make this obvious, because we can't automate it unfortunately. PCI requires that we work directly with the environment that we're sending your data too, to ensure the transfer is also secure.
Two questions: My company is an LLC and I have a valid SSN, however my bank account is in Portugal, can I still apply for stripe ?
If not, do you have plan to support EU countries like Portugal ? thanks
Stripe was like love at first sight, it was exactly what I was looking for a loooong time, but I can't use it for now apparently :( Two questions: My company is an LLC and I have a valid SSN, however my bank account is in Portugal, can I still apply for stripe ? If not, do you have plan to support EU countries like Portugal ? thanks
Even though the credit card details never hits the webserver of the host site, does the fact that the fields are on the site rather than in a secure iframe not mean that there's still a PCI issue? Namely that if a malicious party manages to find a way to inject javascript into the page they can read any form field they want, regardless of whether it's being submitted elsewhere. This was true of Braintree (the form po…
If someone injects javascript into your page, nothing you do will matter -- you are compromised. This is why your site has to be served over SSL (to prevent MITM attacks), and why you should be careful about what third party content you embed in your site. In particular, you should never embed a non SSL resource on an SSL page (also known as the mixed content warning in most browsers).
Obviously you should be doing all this stuff anyway. I guess the point I'm making is that solutions like this make great claims about their ability to solve all your PCI woes, and I'm wondering about the extent to which this is actually true. PCI compliance is (normally) quite expensive to achieve, so your solution is obviously very attractive. But is it enough?
Stripe pretty much takes payment processing kicking and screaming into 2011. Merchant accounts are a serious drag. I've opened a few and they've been nothing but headaches (especially if you're young—nobody trusts you.) Couple that with getting a gateway account, dealing with credit checks, monthly fees, monthly minimums, slow people in the payments industry, PCI compliance... Stripe takes payments and put them behin…
> Maybe if you're charging millions of dollars, you should use a regular merchant account. You should probably still use Stripe in this case. (Some people already are.) We scale up pretty well. Everything that you get with a merchant account (correct statement text, money held in your name), you get with Stripe. Additionally, there are some advantages for large businesses that would make Stripe more attractive than a…
EDIT: removed so as to not hijack another announcement. Was not the intention, just wanted to offer something people thought was useful.
AFAIK PayPal claims to be Credit Card Fraud Protection service that happens to process credit cards.
Does Stripe focus on fraud prevention?