Authorize.net SIM vs AIM

[eugenepark81]

Hi all,

For some reason the forum search isn't providing any search matches for terms "sim" or "aim", although i was able to find a couple threads using google search...

Anyways, im trying to figure out the difference and am having a hard time understanding the requirements of each. From what I can tell:

AIM is generally preferred, more secure, keeps the customer in our cart at all times and requires a SSL cert. Are we required to purchase the SSL cert from authroize.net?

SIM is not as secure? Does the transaction pass them off to an authorize.net page for entering CC info? Is SSL required?

Why is AIM recommended over SIM other than the fact that it is more secure?

Thanks,

Eugene

[stevesh]

Most forums using this software are set to only return searches for 4 characters or more. You can try sim*, but you'll get any word which contains that string.

Anyway, if you're talkng about authorize.net, the AIM is more secure, I guess. You want an SSL certifucate either way, as you're collecting personal info from youir customers. You don't get the cert from authorize.net, though. You can buy any cert and your host will install it (usually). Though they shouldn't be used for Zencart hosting, GoDaddy has cheap SSL certs.

[DrByte]

AIM is more secure because it doesn't have to rely on an (easily-spoofed) redirected payment notification from an offsite browser connection. The AIM process handles the entire transaction privately without opportunity to be interrupted or intercepted or spoofed to falsley trick your store into believing payment is received.

So, now that that's been stated publicly, you've got all the more reason to stay away from SIM since now people have it spelled out for them the hackers can go to town ... That's why the reasons are often stated with a little ambiguity ... for your protection.