I don't trust a site that stores my CC information in a cookie to always serve H... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		TomGullen on Oct 15, 2012 \| parent \| context \| favorite \| on: Is it OK to hold credit card numbers in cookies, S... I don't trust a site that stores my CC information in a cookie to always serve HTTPS pages. Also you didn't address the most important point, PCI compliance. The method Santander employs is unquestionably a bad way to do things.

snikch on Oct 15, 2012 [–]

If the cooke is set to secure it won't be sent in a non https request.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact