Credit card numbers in html5 localStorage -


What if I store encrypted credit card information in the browser's local storage? When the user goes to the site again, the credit card field is prepared by javascript. The form directly states the payment processor, so the credit card information is never sent to my server.

Of course, the site of my site and payment processor is delivered via https.

Is it PCI compliant? Is this a bad way of working?

Since the card # will basically be stored on the customer's machine, then (pci-dss of my With Interpretation) You have no way to restrict or monitor access to that data, though it is encrypted. I seem to be non-compliant

Comments

Popular posts from this blog

mysql - BLOB/TEXT column 'value' used in key specification without a key length -

c# - Using Vici cool Storage with monodroid -

c# - Confused over DLL entry points (entry point not found exception) -