[cobalt-security] Credit cards

[duncan gray <duncanrobertgray@xxxxxxxxx>]

Hey,
Here a quick question, I work for a company that
basically has a shop and does CC processing on a
regular basis, via the machine they have, they also
have authorisation to take CC payments over the phone,
e.g. card holder not present.  Instead of using a
company like secure trading, or something along those
lines, What exactly is needed to take credit card
details store them then access them and process them
manually as if the card holder wasnt present on the
machine that we have.

I'm guessing that you would need something along this
line.

A SSL certificate for encrypting server - client
communication.
Encrypted DB.
A firewall.

Is there anything else?

Cheers.


D.

__________________________________________________
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com