Hacker Newsnew | past | comments | ask | show | jobs | submit | harshilmathur's commentslogin

TL;DR:

MediaNama: So the only way they can understand what to block via this route is by sniffing every packet?

Matthew Prince, Cloudflare: That is what I’m concerned about, but we don’t have a satisfactory answer at this point. But you are correct, that is what I infer.


> MediaNama: As far as I understand, they wouldn’t know the IP address of the host server?

> Matthew Prince, Cloudflare: They should not. That is true.

> MediaNama: So the only way they can understand what to block via this route is by sniffing every packet?

> Matthew Prince, Cloudflare: That is what I’m concerned about, but we don’t have a satisfactory answer at this point. But you are correct, that is what I infer.


Yandex for custom domains allows you to create about 1000 addresses on custom domain for free. The drawback is their mail administrator panel is in turkish but if you have patience to set it up on google translate, it works like a charm.


Cool, I'm on their website right now. So far everything is in english.


- We are a small team right now, but we can assure you will get better service than many of the large companies

- Yes integration with shopify, magento, woocommerce, opencart, cscart, nopcommerce, whmcs etc. is already available.

- We are PCI Certified but we do not store card numbers and we do not provide wallet service at this time.

- Yes, all CC/DC are supported

- You will need the bank account in the name of your business. What we mean is you don't need a separate merchant account for accepting payments which some bank gateways ask you for.

Yes, that's what our aim is, to protect the customers from the red tape and complex regulatory issues while providing a clean integration experience.


thanks and good luck


Hi, Yeah, we saw that thread and it was really interesting. My co-founder replied there too https://news.ycombinator.com/reply?id=9206182&goto=item%3Fid... .

At this point, I can only tell you we have a plan to launch this very soon.


Thanks for the kind words! And, yes, we are definitely working on the feature.


Hi, We do not support that model at this point because of additional regulatory hurdles. We do have it in our roadmap though.


1. Not at this time. We will be launching support for that soon. 2. Yes, you can but then you will have to manually capture the payments from dashboard. 3. The money is transferred on T+2 day where T is day of transaction. 4. Not a this time. We definitely want to support that very soon.


Thanks for the answers.

Reg (2) Is it like https://stripe.com/checkout ? What you meant by capture the payments from dashboard ? Do you mean I have to pull the payment details from dashboard api ?

One last question : How extensively net banking is supported ?


Yes, its similar.

No, you just need to login on the Razorpay dashboard and click on capture on the payments you want to transfer to your account.

We support 35+ banks in netbanking right now.


Thanks.

Some of q & a here can be part of FAQ section in the site.


Sure. We will update it going forward.


Hi, We plan to in the future. We haven't many people requesting it since most of them have majority of Indian customers which can not have recurring billing


How will you reconcile recurring payments with 3D secure requirements?


One way to do that would be to monitor SMSes for 2FA codes. This can be easily done on Android and iOS. The app can run the payments flow in a phanthomjs esque environment and read off 2FA values from the SMS inbox, and bam! Payment done. Also, there are other options for authorizing recurring payments but at fixed amt, and paper work can't be avoided.


Not every bank sends 2FA codes via SMS. For example my debit card with SBI has a static password that I need to put in for every payment


In that case, you could provide the user with a on-device one-click authenticate button (via notification/email, reminding her/him to approve the payment) that'd push the credentials out to your phantom-js instance. I am not sure what RBI complaince mandates, but one might be a strongbox.io away from implementing such a scheme server-side as well, if legal. A lot of care must go into securing such systems, no doubt. And there might be simpler alternatives that I simply cannot think of.


Just like cvv, we are not allowed to store the static passwords.


Well, you don't really store the passwords on your servers, but rather store it on user's own devices (in a keystore, for instance). The user then agrees to push the credentials to your servers periodically instead of typing the password to authorize the payment.


We have a few tricks up our sleeve.


Hi No, the pricing we have given on our site includes interchange fees as well.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: