Hi Team,
We are exploring a way to send credit card details from phone to our backend. Our requirement is to have the Creditcard details encrypted using our public key, before the API call is made.
Does pure-cloud support encryption of payload before sending the API request?
Note: HTTS might not work for us as the PCI compliance team raised a concern of: the credit card number would then be in plain text to our Public endpoint, bringing it and any systems that touched it after SSL into PCI scope (usually our Public endpoint, would not be decrypting SSL itself, usually network equipment upstream handles SSL), which isn't going to be allowed.
#ArchitectureandDesign#Implementation------------------------------
Kartik Sura
Uber
------------------------------