security of credit card info

marlinspike

Is there something I can point to that talks about the security measures smugmug takes with processing credit card info so that I can show my customers?

Andy

SmugMug Credit Card Security

marlinspike wrote:

Is there something I can point to that talks about the security measures smugmug takes with processing credit card info so that I can show my customers?

Great question!

WHAT I'D LIKE TO TELL THEM:
"giving your credit card out online to SmugMug is far more secure than giving your credit card to the waiter at the restaurant down the street...." But alas, the average joe doesn't gr0k that, so...

WHAT YOU SHOULD TELL THEM:

There are a couple of things to look for to see if a site is secure. Well-designed sites will not be secure everywhere, only where needed such as when personal information or financial information is concerned. Here is a little test you can do to demonstrate that SmugMug is secure. Please logout of SmugMug. Go to Smugmug's homepage and look at the URL (Internet address) there: http://smugmug.com/ Now click on Free Trial...Join Now and then click on Try It. You will be taken to a secure page. How will you know? Check the URL (Internet address) and notice that it looks like this: https://www.smugmug.com/signup.mg
The "https://" part is different. That little "s" stands for Secure. You don't see that on normal web pages, only on ones that are secure. Also, look down at the very bottom of the browser window on the right hand side. See a little lock symbol next to the www.smugmug.com text? That little lock is an additional sign that the page is secure. You would see both of those things on the page during the ordering process where the personal and financial information is entered. Not on every shopping cart page, just the important one.

We're also SSL Security - Verified:



I hope this helps!

marlinspike

Thanks, that helps.

Gringriff

May I copy this information and place it on my own page
Hi Andy,

I have received a question about this very thing today. Can I copy this and place it on my site to help customers feel more secure. I really don't want to point them here to DGRIN. I think you have explained it very well and I would like to use it almost verbatim if that is okay - I may take out the part about them getting their own site. I have also asked the question of what to say from the help section on SmugMug.

Thanks,
Andy (my name too!)

Andy wrote:

Great question!
There are a couple of things to look for to see if a site is secure. Well-designed sites will not be secure everywhere, only where needed such as when personal information or financial information is concerned. Here is a little test you can do to demonstrate that SmugMug is secure. Please logout of SmugMug. Go to Smugmug's homepage and look at the URL (Internet address) there: http://smugmug.com/ Now click on Free Trial...Join Now and then click on Try It. You will be taken to a secure page. How will you know? Check the URL (Internet address) and notice that it looks like this: https://www.smugmug.com/signup.mg
The "https://" part is different. That little "s" stands for Secure. You don't see that on normal web pages, only on ones that are secure. Also, look down at the very bottom of the browser window on the right hand side. See a little lock symbol next to the www.smugmug.com text? That little lock is an additional sign that the page is secure. You would see both of those things on the page during the ordering process where the personal and financial information is entered. Not on every shopping cart page, just the important one.

We're also SSL Security - Verified:



I hope this helps!

Andy

Sure, and updated info here:

http://www.smugmug.com/help/payment.mg