Necuima Posted May 27, 2015 Share Posted May 27, 2015 Hi Larry, In the book you mention that you cannot test Paypal's IPN process from localhost (page 169). Are Stripe payments fully testable from localhost? Also, none of my few websites need or use SSL so I have no experience in using HTTPS. It seems that the website owner will need to obtain a certificate, but when I checked the Digicert website there are a number of different types of certificates available. The website that I'm thinking about would have a very low volume of financial transactions in the range $100 - $200 each. Can you please advise what sort of certificate we would need? Many thanks in anticipation. Link to comment Share on other sites More sharing options...
Larry Posted May 27, 2015 Share Posted May 27, 2015 Yes, you can absolutely test Stripe from localhost. For context, you can't with (traditional) PayPal because it redirects the user to PayPal's site and then back to the point of origin, and it can't redirect someone to localhost. Conversely, with Stripe, the user never leaves your site. For the SSL certificate, just get a single name SSL cert: https://www.digicert.com/welcome/ssl-plus.htm Link to comment Share on other sites More sharing options...
Necuima Posted May 27, 2015 Author Share Posted May 27, 2015 Hi Larry, Many thanks. If this goes ahead, as mentioned, this will be my first implementation of a payment feature. Once we get an SSL certificate, does this mean that all URLs for the website must be HTTPS, or can just the Stripe URL be HTTPS and the others just normal HTTP? Thanks, and Cheers. Link to comment Share on other sites More sharing options...
Jonathon Posted May 27, 2015 Share Posted May 27, 2015 Just Stripe checkout ones need to be HTTPS to be PCI compliant. Jonathon Link to comment Share on other sites More sharing options...
Larry Posted May 28, 2015 Share Posted May 28, 2015 Well, any payment form, whether it uses Checkout or a custom form, needs to be loaded over HTTPS to be PCI compliant. But you don't need that for testing. Which is to say, when I use Stripe from localhost for testing purposes, I don't have HTTPS on localhost (but I don't run real cards through it). Link to comment Share on other sites More sharing options...
Necuima Posted May 30, 2015 Author Share Posted May 30, 2015 Thanks, Jonathon and Larry, for you advice. Cheers from Oz. Link to comment Share on other sites More sharing options...
Recommended Posts