Closed chrisarusso closed 8 years ago
Even though stripe info is posted via HTTPS, we ARE capturing a token and passing that clear-text as of a35ee8d
This probably should change to just "serve site over https only"
A little under two years overdue!
Even though stripe info is posted via HTTPS, we ARE capturing a token and passing that clear-text as of a35ee8d