[JazzXP]

So if I'm understanding this right, the big issue they have is that they're not telling the customers that they're doing it. Can't any website do exactly the same thing in recording every keystroke written into it without a customer knowing?

Does it really even matter if you're sending them your credit card details anyway?

[TeMPOraL]

> Does it really even matter if you're sending them your credit card details anyway?

But are you sending them this info? I thought a lot of sites used third-party payment processors precisely in order not to handle this data themselves (and be liable for mishandling).

[JazzXP]

I guess in an app they could screen record that transaction, but if they're only storing fields and values, this is outside of what they can capture.