I need to safely pass a SSN to Stripe from a web page. (We are doing taxes for our contractors)
I am well aware that storing a SSN is not a good idea. We don't need to. Stripe can handle it, but I am unable to establish a secure connection to stripe using our Stripe
secret key from a browser. That key shouldn't be loaded up in React, JS, or anything else where it could be read.
So I can send the SSN to my server and THEN pass it to stripe safely behind the scenes....but that means that the SSN touches the server...Again, to reiterate, I will NOT be storing the SSN. Does this merit any form of encryption from the web-side before it goes up to the server? What additional precautions would be appropriate here?