Paypal / Worldpay

[mark atkins]

Hi all

We are looking at using either one of these services but need some more information on how to secure the system and how to prevent hotspot spoofing.

Any info would be great

[alan]

The credit card input page is SSL-enabled. In fact, FirstSpot actually redirects the user to the payment gateway web site itself, so this should give more confident to the end users. Also, FirstSpot doesn't store any credit card information at all.
_________________
~ Patronsoft Limited ~

[mark atkins]

so when the user is redirected to paypal / worldpay does the site certificate get used to secure the session .So any duping of the site would be down to the user not verifying the site cert is that correct.

[alan]

Yes, the end-users need to check the certificate. But it is FirstSpot that redirects the user to the PayPal/WorldPay page. So unless the FirstSpot system is compromised, it will redirect to the correct payment gateway sites.
_________________
~ Patronsoft Limited ~