Re: iSeries public WEB access, PCI security issues

[DrFranken <midrange@xxxxxxxxxxxx>]

I agree, FUD.

I seem to recall that PCI says you cannot store Credit Card numbers for 
more than 3 days period and even if you do they must be encrypted. Most 
of the folks I work with that do Credit Card transactions store only the 
last four digits for any length of time.

And while I won't list them I know of MANY companies who's IBM i servers 
are connected directly to the internet with web and database on the same 
server.  PCI seems to be interpreted to focus on Intel based systems 
where proliferation of servers is needed to support staff size and 
Microsoft and Oracle revenue streams.


        - Larry "DrFranken" Bolhuis

www.frankeni.com
www.iDevCloud.com
www.iInTheCloud.com

On 8/28/2013 10:58 AM, rob@xxxxxxxxx wrote:

> I question whether someone says PCI rules don't allow this as FUD rather
> than fact.
>
> You're probably not interested in how we serve up our public accessible
> parts of our website that require login's for customers and suppliers that
> are Domino based...
>
>
> Rob Berendt