I'm using Stripe.js for the actual payment which uses SSL and sends the payment info directly to Stripe without ever touching my servers.