Search code examples
htmlsecuritye-commercecredit-cardpci-compliance

Is it PCI-compliant to serve images (securely) from not just a different subdomain, but a different domain?


Is it PCI-compliant to serve images (securely) from a different domain? I searched the PCI DSS 2.0 PDF and didn't find any references to it.


Solution

  • Images do not fall under PCI compliance. PCI DSS covers the storing, transmission, and processing of credit card information only. So you can serve your images from any server you like without having any PCI issues.