Yeah I read that. But it's strange, when I enter in information and hit "Pledge"... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

bhelx on May 1, 2014 | parent | context | favorite | on: The Launch of the Mayday Citizens' SuperPAC

Yeah I read that. But it's strange, when I enter in information and hit "Pledge" it posts the fields to another insecure endpoint:

http://mayone.us/wp-admin/admin-ajax.php

Maybe I am missing something about how stripe works?

yahelc on May 1, 2014 [–]

https://stripe.com/help/ssl

> Do I need to use SSL on my payment pages?

> Yes

bhelx on May 1, 2014 | [–]

I'm concerned about why they are posting to THEIR own server to begin with. Even if they were using SSL, it seems like some kind of misuse of stripe.js

Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact