Looking at the actual payment process it seems you get an iframe embedded within the github page that asks for your credentials. It's not possible for users to verify that the iframe actually belongs to paypal without looking at the source (it doesn't, it actually belongs to <a href="https://assets.braintreegateway.com/" rel="nofollow">https://assets.braintreegateway.com/</a> and it POSTs there too). If this was any less reputable website implementing this it would look really, really shady.<p>It also doesn't help with that we've been training users to check the URL bar before filling in their credentials, which won't help at all now.
Honestly I know it will probably never happen, but it would be awesome if Stripe added PayPal integration. That way we can accept credit cards like we already do, but also accept PayPal using a single unified API.<p>A lot of our international users want to pay with PayPal instead of credit cards. International credit cards also have a high tendency to decline.
I would love to see GitHub actually keeping PP off the site and not putting money in their pockets. I am bit disappointed to see such an innovative and open source company not directly supports one of the most shady corporations around.