Whenever I submit a form with CVV codes I wonder about if the company is storing CVV codes.<p>I went to MyDomain.com to update my CC and their form has a CVV code that doesn't have the autocomplete='off' attribute so my browser remembers the CVV number.
I opened a ticket to let them know.<p>MyDomain.com:
"CVV number is your additional protection to ensure that your Credit Card information is not being used fraudulently."
I replied - that is my point.<p>MyDomain.com:
"If you still feel CVV number is in the account seen please get back with screenshot of the page."
I replied - No, then you'd have my CVV code with is supposed to be private. (their ticketing system doesn't allow screenshots either)<p>MyDomain.com:
"Yes, the CVV number is not visible for the customers due to Security reason."
I replied - It's not PCI DSS compliant to store CVV codes, it may even be illegal.<p>MyDomain.com's legal response:
"I wanted to personally take an opportunity and confirm that we do "not" store CVV information, nor do we store the entire 16 digits of a credit card."
I replied - How do you charge my card without the number?<p>MyDomain.com's legal response:
"At this time we have no immediate plans on making specific changes to our billing submission forms as you have requested"<p>It makes me uncomfortable using a company that doesn't understand the internet to hold all of my domains. If you have suggestions of other domain registrars please comment. I am thinking of migrating.