Thanks Wyatt. How hard is PCI compliance? I'm a single developer, and don't have the bandwidth to go chasing down a bunch of requirements. I'm running an updated wordpress site with SSL provided by letsencrypt. Is that enough? I realize you're not in the business of PCI compliance consulting, but I appreciate any input.
Recommended payment providers?Answered
Hey all, I was using Fastspring as a payment provider, but they disabled my account without telling me and are slow to respond to help me get it reinstated. I'm looking to switch to one of the others mentioned at https://wyday.com/limelm/help/how-to-generate-product-keys-after-order/ Perhaps paypal because they're so well known.
Any input on your personal payment provider preference?
(oh yeah, I like me some alliteration) :)
Answer
We prefer more control and lower fees. That's why we chose Authorize.NET. It also gives us flexibility so that if they start acting up, we can switch relatively easily without ripping out everything.
It's more upfront work, but once that's done it's basically 0-maintenance.
It's not terribly hard if you use their storage for the credit card data. It's more complicated (and requires more design and engineering) if you're storing the card data in your own database.