undefined | Better HN

Better HN

Top Best Ask Show New Jobs

0 pointszbruhnke7y ago0 comments

FYI we are complying with PCI DSS when you use this site - you can read details in the FAQ

0 pointszbruhnke7y ago0 comments

FYI we are complying with PCI DSS when you use this site - you can read details in the FAQ

0 comments

7 comments · 2 top-level

snazz7y ago· 3 in thread

Do we have proof of that? I think the fact that we're taking your word for everything so far is the source of the discomfort here.

toomuchtodo7y ago

Sort of humorous comment, as PCI DSS is self assessment and attestation of compliance. If OP states they’ve met their burden, that’s all that’s required at their scale.

snazz7y ago

Really? I evidently know nothing of the matter, but you're saying that the auditors only get involved when they become a larger operation?

1 more reply

gowld7y ago

PCI DSS assessments are signed by natural persons, not arbitrary HTML content.

2 more replies

craftyguy7y ago· 2 in thread

Anyone can make a FAQ on the web. Not everyone can prove compliance with PCI DSS.

chipperyman5737y ago

The same could be said about any other online merchant...

igetspam7y ago

It could but they should be able to provide an Attestation of Compliance. If they can't, then you can trust that they're PCI compliant.

j / k navigate · click thread line to collapse