Best way to integrate with stripe is to use their checkout button to get a token instead of receiving CC info directly.
Iirc, still need to use backend code to do the actual charge, but at least you never see any sensitive info.
Iirc, still need to use backend code to do the actual charge, but at least you never see any sensitive info.
Oh noes, I have to run php code stripe has done all the work on and provided to me! Scary!
If my inventory service breaks I might have some pissed-off customers or have to re-ship some items, the odds of getting in bigger trouble than that are low. If my payment infrastructure goes down or gets compromised, the odds of lawsuits or federal/financial-org penalties are way higher.
So sure, you still probably have to have a "server" somewhere (you could probably make a fully static site for a merchant using third-party payment links, javascript, and mailto links or something--think "email as database"--but I suspect this would be neither featureful, secure, nor reliable), but the difference in what you need to maintain/serve is huge.