How to use Stripe on non -SSL or http websites?

Question

I'm using rails 3.2.6, and Stipe for payment. Is There any possibility to make a payment with out purchasing ssl certificate. Can i use Stripe page as my payment page?

Answer 1

You can technically skip SSL by using stripe.js but I highly suggest you set up SSL.

What it does is pass credit card information directly to stripe and then stripe will give you a token to use to actually make the charge. Doing it that way means that credit card information never touches your server and you don't have to worry about PCI compliance. However you should still set up SSL to prevent man in the middle attacks.

You can find a good tutorial about how to do this at https://stripe.com/docs/tutorials/forms

There is also an episode on railscasts which explains it more in depth.