using m2crypto to encrypt credit card numbers

[Anthony Baxter]

>>> Graham Ashton wrote
> If you get too
> much fraud (I think the limit was 40% fraud by value in the UK, but my
> memory is hazy) going through your site you can get your merchant ID
> status revoked by the banks (i.e. you get your transaction processing
> account chopped).

The stuff they get really shitty about is charge-backs. If you can detect
the fraud and do the refunds yourself before the end-user notices, you can
get away with it... 

I hate the credit card system. As designed, it's completely insecure, and
the merchants end up copping it in the neck because of the appalling design.
Since the banks and the card networks don't take any losses, they have 
little or no incentive to FIX the bloody problem. Anyone remember SET?
It was going to save all our lives, make the world a good and great thing.
And that was in 1996. Still waiting for it...

Anthony
-- 
Anthony Baxter     <anthony at interlink.com.au>   
It's never too late to have a happy childhood.