Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #17039

Re: Need help with two-way script (PCI DSS)

Show all headers | View raw

On 09/08/2016 10:59 PM, Jerry Stuckle wrote:
> On 9/8/2016 4:06 PM, J.O. Aho wrote:
>> On 09/08/2016 08:05 PM, Jerry Stuckle wrote:

>>> So it sounds like you have control over both sides of the conversation,
>>> in which case you can do about anything you want.  So the first thing
>>> you need to do is determine how you want to transfer the data.
>>>
>>> Personally, I would consider directly accessing the MySQL database - I
>>> believe for the most part the less involved, the less that can go wrong.
>>
>> In this case you may get a PCI DSS dependency which you may not want to
>> have, you will want as few machines as possible in scope, as this makes
>> audits a lot easier and less work.
>>
> 
> Not if it's designed properly.  For instance, MySQL can use encrypted
> connections, and firewalls can limit access.

If application A stores PAN/Card holder data in the database and
application B only is interested in the email address and both access
the same database, then both applications are in scope for PCI audit.

If you let application A send the email address to application B with a
https request and application B returns a true or false answer, then
application B is out of scope for PCI.

There are big difference in the amount of PCI documentation you have to
have and less requirements on the server which application B is running.


> But if the MySQL database is on another system, you'll have that problem
> anyway, no matter how you access it.

You have a compensating control on the MySQL too, as it don't support
encrypted columns, sure you can (must) have it running on a luks partition.


From PCI point of view, I would recommend to use postgresql unless you
want to use money and go for oracle/sybase... the less compensating
controls you have the smother the PCI audit will be.


-- 

 //Aho

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Need help with two-way script Adrienne Boswell <arbpen@yahoo.com> - 2016-09-08 01:48 +0000
  Re: Need help with two-way script Jerry Stuckle <jstucklex@attglobal.net> - 2016-09-07 22:51 -0400
    Re: Need help with two-way script "J.O. Aho" <user@example.net> - 2016-09-08 06:29 +0200
      Re: Need help with two-way script bill <william@TechServSys.com> - 2016-09-08 07:50 -0400
        Re: Need help with two-way script Adrienne Boswell <arbpen@yahoo.com> - 2016-09-08 17:39 +0000
    Re: Need help with two-way script Adrienne Boswell <arbpen@yahoo.com> - 2016-09-08 17:43 +0000
      Re: Need help with two-way script Jerry Stuckle <jstucklex@attglobal.net> - 2016-09-08 14:05 -0400
        Re: Need help with two-way script "J.O. Aho" <user@example.net> - 2016-09-08 22:06 +0200
          Re: Need help with two-way script Jerry Stuckle <jstucklex@attglobal.net> - 2016-09-08 16:59 -0400
            Re: Need help with two-way script (PCI DSS) "J.O. Aho" <user@example.net> - 2016-09-09 06:32 +0200
              Re: Need help with two-way script (PCI DSS) Jerry Stuckle <jstucklex@attglobal.net> - 2016-09-09 10:05 -0400
                Re: Need help with two-way script (PCI DSS) "J.O. Aho" <user@example.net> - 2016-09-09 18:21 +0200
        Re: Need help with two-way script Adrienne Boswell <arbpen@yahoo.com> - 2016-09-08 20:17 +0000
          Re: Need help with two-way script Jerry Stuckle <jstucklex@attglobal.net> - 2016-09-08 17:03 -0400
          Re: Need help with two-way script Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2016-09-10 12:04 +0200
      Re: Need help with two-way script Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2016-09-10 11:54 +0200
  Re: Need help with two-way script Ben Bacarisse <ben.usenet@bsb.me.uk> - 2016-09-08 12:54 +0100
  Re: Need help with two-way script "J.O. Aho" <user@example.net> - 2016-09-09 06:54 +0200
  Re: Need help with two-way script Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2016-09-10 09:04 +0200
    Re: Need help with two-way script Jerry Stuckle <jstucklex@attglobal.net> - 2016-09-10 10:19 -0400
  Re: Need help with two-way script He <y12983@mail.ee> - 2022-02-02 02:23 -0800

csiph-web