Hacker News Reader

Hey Knwang, I am the creator of EasyBill. The service uses Stripe's Javascript API, it communicates directly with Stripe's servers to create the Credit Card token. The site actually does not intercept any customer credit card info. But thanks for the feedback, can you give me an idea how you could be made more confident with the service?

View on HN

I have to give you my live secret key, which means you can basically do anything you want with it - charging people with my account, etc. How do you store that? How do you make sure it's not going to be breached?

Also, I suggest that you put up some copy to make people feel more comfortable. I run http://www.railstutors.com, and in our payment page, we get a lot of requests from people to see if they can pay with Paypal. We recently put up some copy to help people understand that we are safe, and it seems to help a bit.

Check out our copy on the right bottom. https://www.railstutors.com/courses/learn-ruby-on-rails-2012...

Reply on news.ycombinator.com