<BLOCKQUOTE class="ip-ubbcode-quote"><div class="ip-ubbcode-quote-title">quote:</div><div class="ip-ubbcode-quote-content">Originally posted by typhus:<BR><BLOCKQUOTE class="ip-ubbcode-quote"><div class="ip-ubbcode-quote-title">quote:</div><div class="ip-ubbcode-quote-content">The latest version extends this functionality to also cover cookies, passwords, tabs, and form contents. </div></BLOCKQUOTE> <BR><BR>This will be interesting. Form contents will include credit card data. Since PCI is an industry regulated set of compliance rules there is no way to enforce anything but it's not going to be secure. </div></BLOCKQUOTE><BR><BR>PCI-DSS only applies to merchants and transaction processing service providers. The PAN needs to be encrypted on the mechant and service providers' end. Since it would be the end user sending his plaintext information to a 3rd party service this wouldn't apply.