iframes

[stevesh]

I'd like to know where you read that as it's just not true. It is true though, that using iFrames will break PCI Compliance which is why one does not use iFrames in eCommerce websites.

Just to be sure, are you saying that inserting iframe content in, say, an EZ page, will affect PCI compliance ? Doesn't sound right.

[Website Rob]

Just to be sure, are you saying that inserting iframe content in, say, an EZ page, will affect PCI compliance ? Doesn't sound right.

I cannot provide a link to other definitive sources and this seems to be somewhat of a grey area. I could be wrong but PCI scans seem to be somewhat of an Art & Science. Some report problems that others do not. Some will fail if an iFrame is used anywhere and some will fail if an iFrame is just used on the payment page.

I have taken the position that not using iFrames anywhere, is the way to go. It is my belief that AJAX will supersede iFrames and even though both have their problems, security and otherwise, the former is better than the latter.