Open bfishbaum opened 5 years ago
This is necessary for MVP since if we have no way for customers to pay we cannot make any money. We do not want to expose clients information so this is a large task to make sure we securely deal with any payment data and properly utilize the third party api. We estimate 8 hours.
We need to have a way for customers to pay for their donuts in a safe and secure way. It doesn't make sense to write our own especially when we could expose clients to data breaches, so we'll use CommerceFriend to process payments.
Card As a donut buying customer, I want my payment to be secure and confidential so that my personal information stays private.
Conversation Dev - are you worried about leaks or you mean anonymity in the context of human interactions. For example, a donut seller should not be able to know your name or address Customer - Definitely leaks, the encryption or security should be state of the art and the latter as well, to an extent. The app will know but there is no need for the donut seller to have any of my information on file.
Confirmation User can make an encrypted private payment with information stored in a secure database, Personal info decoupled from delivery - the seller side should not contain any details like name or address, just order info and drone identification.