I plan on using a service such as Authorize.net to process user’s credit cards. Which brings two questions.
- Will I need SSL on the payment page even though I will be letting the third part handle most of the processing?
- Will I need to get the user’s address? And if so, will an apartment number be required? (If they have an apartment, of course)
Yes. The processing will most likely be done through some API that you will call. So getting the information from your users from the browser to your server will require encryption (SSL)
That depends on your set up and what Authorize.net will require.