ruby-on-rails - If I am developing a hosted payments page, what should the infrastructure look like?

Question

I know if I am dealing with businesses in the US, I would have to comply with PCI Standards and stuff like that....but I am starting outside of the US, so there isn't that regulation to deal with.

That being said, I would love to know what the best practices are in terms of accepting credit cards and reducing fraud risk on my end.

I will be creating the app in Rails, but want to know what sorts of things I should be thinking about to keep everything secure.

Thanks.

Answer 1

PCI 是一项全球标准 - 如果您计划使用信用卡，则无论您的企业位于何处，都必须符合 PCI 标准。

我建议您从https://www.pcisecuritystandards.org/merchants/开始熟悉 PCI 规则和规定。