Hacker News Reader

This is actually how a lot of merchants work -- they send CC info to a bank or processor, and get back a token they can use to charge that CC (without having to store CC information). Why Adobe didn't utilize this is beyond me.

View on HN

And what do you do when the payment provider you use sucks, and you want to move to a new one? Oh right! Every existing customer have to sign up again, and input the same info again.

That's the reason to aim for PCI compliance your self.

This isn't really true anymore. Most major tokenization providers also provide a way to transfer data from one provider to the next.

I'm sure they aren't happy about the idea, but most of them recognize that lock-in is a reason people don't use their services.

Then I need to investigate if our payment provider provides this service :)

Reply on news.ycombinator.com