Hacker News new | past | comments | ask | show | jobs | submit login
Link: Simple, secure one-click payments by Stripe (link.co)
112 points by coloneltcb on April 14, 2022 | hide | past | favorite | 24 comments



Edwin from Stripe here. This isn’t really new—we first introduced saved payment info in 2014 but started renaming it last year (https://twitter.com/patrickc/status/1375611432331407363). The linked page is a support portal to let customers manage their saved payment methods.


Is it possible to create a payment link that customer can follow to pay you a certain amount without dinking with all the invoice/product/price junk? If I create an invoice in another system I want to put a QR code on those invoices that customers can simply follow and pay. That link/payment should be tied to metadata I provide to Stripe--associated with that link. Sort of like a hosted UI payment page. I think PayPal does that but I want to stay away from them.


We are working on a few things in this vein.


Why isn't this under the Stripe domain or Stripe site? I mean if you haven't commented on it I would have thought this is some sort of a scam.

And if it was postponed as a different product ( which seems to be the case ), the information, layout etc seems to be sparse that left me questioning if Stripe is really intended to do this in the long run.

Basically the "message" or signal that is sent here isn't very convincing.


It's wild to me that "one-click buy" has somehow become a product category. If an online retailer already has your payment info and shipping details, it is trivial to offer a one-click experience, is it not? Couldn't PayPal offer this and leverage all their existing integrations? Why haven't they?


It was patent-locked until a few years ago thanks to Amazon, but beyond that, handling payment information is a pretty hairy process. Credit card numbers are considered to be PCI and the network subject you to annoying audits and processes to be able to store it.

So, for one thing, it's not possible for retailers because very few (probably none) store payment credentials anymore. Too expensive - that's what payment processors are for.

For payment processors themselves, clearly they can, it's the subject of the parent post, but there are regulatory hurdles.


> If an online retailer already has your payment info and shipping details

This is specifically for the case where the retailer does not want to store these details. Heck they can even get away with not building a user account system at all. Just a store listings page and a few lines of code imported from Stripe.


Totally fair, but this doesn't clarify why a company like Fast needed to exist. It seems the existing payment processors are able to add this feature rather easily, and I don't see how a new player would be able to get over the integration hurdle to supplant PayPay/Stripe/AmazonPay/etc.


> If an online retailer already has your payment info and shipping details, it is trivial to offer a one-click experience, is it not?

I'll add that some countries now have rules that prohibit retailers from storing the payments information of customers.

I don't know the details, but India now has such rules in place.

For retailers to store customer information (for recurring payments and whatnot) — from what I understand — they cannot directly store the card details but instead have to generate a token or something and use that.

In India, big companies (like Amazon, Netflix etc) seems to have complied, but many smaller ones haven't.


if by payment info includes credit card detail, then no, most of them that use Stripe(including my employer) does not have them, and its not trivial to do so. There are very strict regulation you have to adhered to if you want to store such details, and I assume a lot of people/company using Stripe are not eager to do such extensive work when Stripe can do it for you.


Yea I'm right there with you. This is a feature parading as an industry.


Come one, come all for the fast jokes.

But seriously, I wonder if they had to pay Amazon; wasn't there a patent on one-click checkout? Looks like there was some back and forth but if it is in a cart, Amazon has it patented: https://en.wikipedia.org/wiki/1-Click


Patents are valid for 20 years, the patent for 1-click expired in 2019.

Huh, nope 2017? https://www.businessinsider.com/amazons-patent-on-one-click-...


I have no idea about the US patent system. But it sounds so weird to me that only Amazon could do this for 20 years. It seems like a simple feature to implement for any e-commerce platform.

Did this patent apply also for non US companies?


The government/patent system had no idea what to do with software patents in 1997 and were pretty, uh, liberal with them for a while.


Expired in 2017 which led to the recent rise of one-click checkout startups


How secure is that? It’s pretty easy to intercept SMS.


Yeah I wish it didn't use SMS. But using an authenticator app can be slow and defeats the purpose of this. I am not a security expert, but from a UX point of view is it perhaps better if the user had to install a stripe mobile app, and gets a prompt to accept or decline?


Something is really off under phone number validator. I can't type my 9 digit mobile phone number for +48 (Poland).


Fix is in flight now—thanks.


(Dupe, see old thread from this morning: https://news.ycombinator.com/item?id=31028131.)


There’s already an e-commerce platform that does this, before stripe http://www.plugnpaid.com

And with a lot more features


Isn't this basically fast with a different name?


Waited for Fast to shutdown first.

So, I guess that slow and steady wins the race. Not the Fast and the Furious.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: