maybe Visa/MC will allow carrier pigeons to deliver credit card info, 1 digit at a time.
i never wanted to use a real-time gateway because:
1) i don't want to charge a card until an order has shipped. so all i could do is a real time authorize...
2) the MonsterCommerce shipping calculator is wrong. the equations it uses to compute weights are incomplete. i complained about this 1 year ago and still no fix! if i can't calculate an accurate weight automatically, then how can i pre-authorize the correct amount? so i'll have to pad the shipping amount...
3) not all of the products i sell are in stock. i sometimes have to import them to fill orders. this can takes days or weeks. in the interim, customers often ADD to their orders. that means the pre-authorized amount is completely wrong. and how can i submit payments higher than the amount pre-authorized without reconfirming the credit card details, which MonsterCommerce won't let me have access to.
4) i shouldn't be forced to run my business just like everyone else just because my shopping cart provider is unwilling to consider a traditional business model for accepting credit cards. if Visa/MC won't allow ENCRYPTED storage of customer credit card info, then it's clear to me that Visa/MC have decided to put e-merchants out of business and this is the first step.
when i was in the semiconductor business, there were EDA tools companies that would come in and audit our design department in an effort to streamline the design process. the end result of all that money paid to them in consulting fees was for the EDA companies findings to be nothing more than a shopping list of their EDA tools which they wanted us to buy. i wonder if the security consulting company that
i can understand the CVV code being required to be separate from the credit card. it's not a strong argument to me, but i can understand why they are being so paranoid, but if the CVV code is not collected, then why also suppress the expiration date?!?!?