This, Episode 34, is the second of four shows in a series on Online eCommerce Security. We talk with Dre Armeda, co-founder of Sucuri.net, who is the sponsor for this series. In the first episode, we looked at the big picture of the state of online security and the risks. In this show, we dive deeper into the eCommerce and WordPress side of things. Although online security is an issue with all sites, when you start mixing in eCommerce and WordPress, it can inherently bring in some other challenges. Dre takes us through those and gives us a deeper understanding of how we can be more prepared for online risks when securing our online stores.

We chatted about:

* The motivations behind taking down eCommerce sites

* The importance of the PCI (Payment Card Industry) and a brief introduction to its background

* What a person should be looking for when they are choosing the right  host for their eCommerce site

* How the security plugins for WordPress play into this and what they are doing right and wrong

* A CDN (Content Delivery Network): how it not only improves site speed but also plays a role in the security of your site

* How the PCI focuses on cardholder data environments and not enough on eCommerce deployment and integration

Thanks to Our Podcast Sponsor: Sucuri.net

Transcript

You can also download the transcript of this show: the-wp-ecommerce-show-transcript-october-17-2016

Bob Dunn: Hey. Everyone welcome to our show. Bob Dunn here also known as Bob WP on the web. Today we bring you episode 34, but also the second part of a 4 part series on security and eCommerce. Last week we heard from our guest, Dre Armeda via our sponsor, Sucuri.net, on the overall state of online security and some of the risks that we are seeing in today’s world. If you didn’t get the chance to listen to that one, make sure you do. In our show today, we are going to focus down on security and eCommerce and start exploring the overall picture of keeping your online store secure. As we move into the last 2 shows after this, we will even dig deeper into navigating the payment card industry data security standard in the next show and then online payments and their security implications on show 4. Welcome to the show again and how are you doing today, Dre?

Dre Armeda: I’m doing wonderful. Thanks for having me back. I can’t believe you allowed me to get on the air with you one more time.

Bob Dunn: I know. It’s just going to be a 4 time thing. We will never know. Everybody will have to tune in to see if Dre or if we talk to somebody else. You’d never know.

Dre Armeda: You never know.

Bob Dunn: Let’s dive right into this because I know we have a lot to cover. We want to make sure and get all that good information out of you. First question, obviously it’s important to keep your site secure, but we know when it comes to online stores, there are some very obvious vulnerabilities they have. I’m sure we’ll be diving more into each one either today or in the future show, but can you give me a list, I know you don’t like list, but let’s say a checkpoint of getting your online site securely locked down.

Dre Armeda: You know how I feel about lists, Bob. Come on, big guy. It’s a good question, but I don’t know that it’s entirely accurate in terms of how we want to think about it. It’s not a matter of having more or less obvious vulnera...