Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I use stripe.js in a number of my projects but I've never trusted it. Looks like my fears were justified.

Instead of loading it on startup, I always load the library as the last step before the checkout flow is initiated. Here is a working example of how to do this for anyone who's curious.

https://jsfiddle.net/167ajcbw/



no, they weren't.

did you read pc's comment (top currently)?


"It's okay because 'fraud prevention' " isn't a good enough reason to horde my user's data without their consent.

Furthermore, a heartfelt promise from a payment provider to never sell my data means about diddly squat to me.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: