I guess it depends how far into the process you take the e-commerce system on the clients site. Most payment systems like Protx will let you send the persons totals and address details encrypted to their secure pages. I have a client who wants to store cc's in their DB and do manual merchant processing. That's secure connection and encryption city which will be a worrying challenge.