It should probably be placed in the documentation that this module should be used with an ssl certificate. To my surprise it actually works fine without it (I thought auth.net required ssl, but apparently not)

Sam

Comments

obsidiandesign’s picture

obsidiandesign commented
Assigned: Unassigned » obsidiandesign

Authorize.net requires SSL in the website->Authorize.net transaction only. I will add a note that the module should only be used with SSL, since it is processing credit card data. However, Authorize.net does not check how the data was collected, only that it is sent to Authorize.net through SSL.

Thanks,
Bryan O'Shea
Obsidian Design

jmcclelland’s picture

jmcclelland commented

Perhaps an option could be added to the authorizenetwebform settings page to optionally force the web form page to be https. If this option were enabled and the webform page was accessed via http, the module would redirect to https.

jamie

jenlampton’s picture

jenlampton
she / her
commented
Version: 6.x-1.2 » 7.x-1.x-dev
Issue summary: View changes

Bumping this issue to the 7.x branch, since it's still a good idea to recommend SSL when dealing with CC data.

  • jenlampton committed 7245189 on 7.x-1.x 
    Issue #932644: Add a notes about using HTTPS/SSL anywhere we can.
jenlampton’s picture

jenlampton
she / her
commented
Status: Active » Fixed

I also added a note into the install.txt file.

  • jenlampton committed da9b40f on 7.x-2.x 
    Issue #932644: Add a notes about using HTTPS/SSL anywhere we can.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.