Advice on this email regarding payment

[SJ77]

I received this feedback. 

Please advise.

Quote

I tested a transaction under your site and found that you appear to be accepting credit card numbers over HTTP Plaintext.

This is insecure, puts users at risk of CC theft, and may deter potential purchases. 

Please look in to site-wide SHA2 SSL certificates

i thought it was all handled on the stripe side.

thank you

 

 

[SJ77]

I went ahead and went full SSL