Here in the US, everyone has to pass a regular Trustwave scan. Mine consistently shows up as not being compliant because login information is not transmitted via SSL encryption.
 
If you go to my page, edsets.com, clearly the login page is
 
https://www.edsets.com/user_login.php
 
Since that's the only login that customers have available to them (no login blocks any where else except the main page) I can't see how that would fail my scan.
 
Thoughts?
 
Ed

I'm in the US, and never had anyone do a trustwave scan... so where's this mandated at?

IT applies to any site in which a Merchant Account for accepting credit cards is used. In other words, if you take credit cards in the US, you get a Trustwave Scan, and your business is at risk if they find non-compliant issues. Security on CC info is serious business.
 
SO, if you take credit cards, and Trustwave has not found you yet, they will.

We're not sure what is the problem as we have a customer who has successfully passed Trustwave scan while they take credit card data on their site: caviarexpress.com
 
So maybe there are some other issues you need to fix to get validated.
 
 

They MAY find me, but they will not find any issues as my cart is secure and PCI compliant.
 
Regards,
 
Dan
•TOCDCO•

use paypal mate

PayPal especially needs you to be pci compliant ans have a link on your page with the provider - in our case Trustwave.
 
They told us that if did not have this they would discontinue to handle payments for us.
 
We did have some problems at first - our misunderstanding - but now we are OK and Trustwave scans work fine for us.
 
PayPal did not insist that we used Trustwave but said it would ensure that they would get their conformation and this would avoid service interruption.
 
See thread www.viart.com/pci_certificate.html
 
www.malikstores.co.uk

Anyone ever on the downside of PayPal would highly disagree with your enthusiasm for using them as a payment processor. I moved to S. Korea and neglected to update my account information. After a month PayPal blocked my accounts, name, e-mail accounts, routing numbers, all were black-listed through their site as well as my wife and families accounts for being associated with mine.
 
They held 20 thousand dollars of mine for 8 months before my lawyer was finally able to make them mail me a check.
 
To this day (and this was years ago) I cannot make a PayPal account... for not updating my information when moving internationally. I wasn't illegal, I wasn't illicit in any way. No real reason was ever given.
 
I'm not an exception either. People are monopolizing PayPal without understanding what that will leave them with in the end. I was lucky enough to find out early. I'm now very well-off with my Authorize.net account and I can still process all major credit cards (and do quite a bit more than PayPal ever offered)

Sorry Porphy, I have used PayPal for my shop for 6 years and only had one minor glitch that was quickly resolved.
 
I am pleased you are happy with Authorize.net - I have no reason to move from PayPal. That's a logically reasoned decision.