Is Java required where SSL is in place?

[KatieTheisinger]

Hi,

Hope someone can help. A client's installation of Actinic v10 is requiring that customers have Java installed in order to process credit card payments, even though SSL is in place. Is that right - or is something set up wrongly?

Thanks
K

[Goz]

I think I know what the answer is going to be but what payment method are you using?

[Darren B]

or are we all wrong and this is something to do with the new checkout process and js not being installed to show the new checkout process? (i know, i know but i like to give the benefit of doubt and yes v10 should work fine without it in stalled)

[KatieTheisinger]

I had to double-check this, but it seems no PSP is being used - the card details are captured and the payments processed manually.... which is presumably why the Java applet is required (?)

No longer a recommended method, as peblaco said, so I guess going forward we need to think about changing to a PSP.

Thanks for your help.

[guccij]

It's not just not recommended, it's actually not allowed unless the client is fully PCI compliant ;-)

Look what happened to Lush recently - they were keeping customer card details on the server, the server got hacked, they got stuffed. A business wrecker in terms of customer confidence.