[chairmankaga]

But if the host traffic is compromised you can serve malicious payment gateways/forms.

[sulam]

If the host is compromised HTTPS isn't going to save you.

[novocaine]

it will if it's the host /traffic/ that is compromised