Requests | Blesta

Requests

Stripe Elements

Tristian Kelly shared this idea 5 months ago
Under Consideration

It would be nice if Blesta would use Stripe Elements rather than directly sending card info to the Stripe API, as this is more secure and would make people less paranoid (I certainly was having second thoughts enabling this payment gateway). When I had to enable 'accept unsafe payments' inside the Stripe dashboard, it had all these things I had to check about PCI compliance and security. This seriously makes me nervous about using the gateway with Blesta.

Comments (1)

photo
1

Using stripe.js is on our todo list, however, it is not "unsafe" for credit cards to pass through your Blesta server en route to Stripe unless your server is compromised. This is why PCI compliance is important.

If you're worried about cards passing through your server, then only use Non-Merchant gateways in Blesta.