Hacker News new | past | comments | ask | show | jobs | submit login

Actually it is an iframe with https (using stripe)



But if the host traffic is compromised you can serve malicious payment gateways/forms.


If the host is compromised HTTPS isn't going to save you.


it will if it's the host /traffic/ that is compromised




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: