Has anyone worked with eWay payment gateway before?
Basically, there's a service endpoint where you post the customer's detail and credit card details from the web application after the browser sends those detail to the server.
Now, how's that security of anykind? (Please note I'm no security expert. Just a developer) The weakest link of online payment, AFAIK, has always been the consuming party of the service, ie the eCommerce websites themself.
If I were the user, I expect my CC detail to be only handled by the payment gateway, not the web applicatiion. Wasn't that the whole point of a payment gateway? To abstract the security concern from the web application?