"Hot Potato" Payment Processing

Here's another nugget from Doug Schwegman, Market Research Director at Cybersource: To reduce their security risks in payment processing, merchants are completely eliminating payment data contact with their systems by outsourcing acceptance.

You can use a PCI-compliant payment services supplier to host the payment data fields that appear on your checkout page. This can be implemented as an iFrame within your checkout page, or a fully hosted page. Using this approach your company neither handles nor stores payment data, thereby eliminating the burden and most of the costs of payment data security management.

(From the Insider's Guide to ePayment Management.)

I would love to hear from anyone who is doing this....