Hacker News Reader

Wow so when was our CC gateway going to tell us this?

Just before July 1 so we're scrambling to get code out to we can continue to make money?

Or after the giant business murdering fine arrived?

And we are with one of the really BIG ones . . .

If you have your own merchant account you should have received a message via email.

This is rubbish no where can I find a requirement that we need to go above and beyond what we normally do to remain compliant with PCI-DSS if we do not store our customers credit card data (which we don't).

I am marking this one as link bait and moving on, annoyed at the waste of a couple of hours.

Talk to your acquirer - they're the ones who'll be enforcing PCI-DSS compliance/certification on you if required, not the gateway.

Reply on news.ycombinator.com