Renato Gelforte

@fsfe Disappointed to see FSFE move to Stripe/PayPal (US) after the Nexi fallout. For a foundation preaching EU sovereignty, why ignore European alternatives like Mollie, Adyen, or Satispay? #Privacy deserves an EU-based infrastructure #DigitalSovereignty #FreeSoftware #FinTech #Nexi

@mattesilver @fsfe Adyen, for example, is a Dutch giant that processes payments for companies like Uber and Netflix. They aren't 'nobodies'; they are European success stories we should be proud of."

@fsfe Payment providers like Nexi already handle sensitive donor data and often possess more financial insights into transactions than the merchant itself. Furthermore, it is common knowledge in the IT world that psw should be encrypted or hashed; a major financial institution requesting plain-text passwords or access to authentication credentials during a 'risk analysis' would be a massive security breach in itself, which is hard to reconcile with banking compliance standards.

@fsfe I am sorry to hear about the termination of the contract with Nexi, as it clearly causes an unfair burden on the FSFE and its supporters. However, as someone working in the IT sector, I find the narrative regarding the specific request for 'usernames and passwords' quite puzzling and, frankly, unlikely.

@fsfe While I support the FSFE’s commitment to privacy, this specific part of the explanation feels like a potential misunderstanding of the technical or legal terminology used during the audit. I believe providing more clarity on what exactly was requested (perhaps specific API access or KYC documentation?) would make the report more credible to the technical community.