Hacker News Reader

Comment by fauigerzigerk | Hacker News Reader

Does the customer know that they are storing their card details with Stripe and not with the merchant?

I think that's important because some people (such as myself) tend to avoid storing card details with arbitrary merchants. I would be far more comfortable knowing that my card details are stored with a specialised payments company like Stripe.

View on HN

If you already have a credit card with Stripe then definitely yes, you know the merchant doesn't have your card number. IIRC, when you first enter a credit card you remain on a web page controlled by the merchant, so it would be hard for Stripe to guarantee the merchant didn't intercept it in any way. Since this guarantee isn't possible, they're not going to show a message that says the credit card is stored at Stripe and not the merchant. It's up to the merchant to show such a message.

You can implement Stripe such that the merchant never sees the credit card number.

Yes, you can. To ever see the credit card number you'd have to be trying. But I don't see a way to implement stripe in such a way that the credit card entry happens on a separate page on stripe's site where the customer can look at the padlock in their browser's location bar to know that only stripe has access to the entered information.

This can be done with the new version of Stripe Checkout - it’s essentially a hosted payment page.

Reply on news.ycombinator.com