[freeside-users] question about freeside credit card security

Ivan Kohler ivan at 420.am
Wed Apr 5 15:39:02 PDT 2006


On Wed, Apr 05, 2006 at 03:18:46PM -0700, Gerard J. Cerchio wrote:
> Hi Ivan,
> 
> Thanks for the corrections below. Is credit card encryption a recent 
> addition in the past year?

Yes.  Well, technically, no, its been more than a year.  :)  But yes, 
its is recent.

The first encryption work was checked in on March 19th 2005 and was 
contributed by Peter Bowen.

> I am running 1.5.0pre6

That's pretty out of date.  1.5.8 will be released Real Soon Now.

> could I turn on encryption on the credit cards so that my database 
> dumps have the encrypted credit card information in them?

Nope, you need to run code newer than 2004 first.  The credit card 
encryption works on newly inserted or modified records; I don't think 
there's (yet?) a script to encrypt existing records.

-- 
_ivan



More information about the freeside-users mailing list