[tompi]

Actually, CC details never transit to the shop server. The CC inputs don't have a "name" attribute, so the browser doesn't add them in the request. Instead, the stripe javascript catches the submit, sends the CC details to stripe with ajax, and add an hidden input containing an authorization token the server can use.

Of course the customer don't know that, but as a developer I'm very happy not to handle any CC details in my server/app :)