←back to thread

1134 points mtlynch | 1 comments | | HN request time: 2.477s | source
Show context
jsf01 ◴[] No.22937965[source]
The most effective anti-fraud solution would be a major privacy violation just by the nature of anti-fraud itself. So, since the stripe user is the one being charged for disputes anyway, giving them control over how much more privacy to give up in exchange for better protection is completely obvious. Even if the default is to be extremely pervasive as Stripe’s anti-fraud measures are now, the option to reduce that tracking is a must.
replies(2): >>22938181 #>>22939209 #
1. bastawhiz ◴[] No.22939209[source]
You can opt out of Stripe.js, but then you must accept the burden of being PCI compliant (or instead chose to use a hosted Stripe flow).