Besides Pay Pal, PCI DSS requirements of payment gateways

Hi,

Are any of the below ZC payment gateways combined with any associated services provided by the below companies, NOT required by the credit card companies, that the server that a store is located on, be PCI DSS compliant?

Authorize.net (SIM)

Authorize.net (AIM)

Linkpoint/YourPay API

Are there any third party ZC payment gateway modules (and associated gateway services) that are not required by the credit card companies, that the server that a store is operating on, be PCI DSS compliant?

Thanks.

NOT required by the credit card companies, that the server that a store is located on, be PCI DSS compliant?
Why would you want to expose yourself by not being on a secure server??

I am on a secure server.

I just don't want the hassle of the submitting my server to the wims of the credit card companies and their approved scanning vendors and all their new regulations and associated liabilities.

I want all credit card processing done on someone else's server.

I would rather have someone like Pay pal or if possible a third party gateway to take on all the responsibility of PCI DSS.

I like to sleep at night.

Which is why I asked the original question...

I want all credit card processing done on someone else's server.
Sorry that I responded because I take a dim view also of the "scare" tactics used by these outfits....

As far as I am concerned - - if you do not store ANY data then the only section of the rules that you must comply with is the SSL requirement....

But this is a "HOT" subject....

Oh No problem Kobra it's just a pain in the rear sifting through all this PCI baloney.

been worried about this for some time now, switched all my sites to using Pay Pal web standard.

I have all my sites secured with SSL

Even so, I don't process, transmit or receive or store any credit card data so in this scenario it is my understanding that whether or not I have an SSL certificate for any particular site the point is moot, the card companies can't force me to have an SSL certificate if I don't touch any credit card data...

Or are they saying that they can?

nadsab:

I would rather have someone like Pay pal or if possible a third party gateway to take on all the responsibility of PCI DSS.

I like to sleep at night.
While it's understandable that you don't like to have your payment provider placing demands on you, PCI compliance is a good thing.

There's a certain irony in the idea of "sleeping better at night" because you don't have to worry about a security scan telling you that something is wrong ... vs ... sleeping better at night because you are being scanned and know that the security scans are catching problems before you get hacked.

I think one needs to be VERY careful about assuming that NOT subjecting yourself to scans is somehow "better". It's not.
PCI compliance is your responsibility if you run a website, whether or not your payment company is demanding scans or self-assessments of you. Period.

DrByte, no one is demanding anything of me, yet.

I use pay pal Websites Payment Standard and with that situation I am not required to submit to anything under PCI DSS.

The only thing I was asking, is are there any other payment gateways and services who also don't require that a store plugging in to their payment system submits to PCI DSS?

Or is Pay Pal the only one?

Authorize.net SIM offers a hosted payment choice.

As to other gateways not built-in to Zen Cart, you'll need to ask the vendors individually. The decision is really between you and them.

OK thanks I'll check it out.

Apparently Google checkout is similar to Pay pal in not having to worry about PCI DSS.

Is there a third party ZC mod for google checkout besides the Google Checkout module for Zen Cart
in your add on section?

That one is dated dec 2007 it's almost 3 years old now...

I haven't tried Google Checkout yet, but many here use it successfully. There's also a new version of the Amazon Checkout mod - I haven't tried that yet, either. There's also gpal.