Re: In what way do you assert that excerpt requires
Given that PCI compliance specifically requires encryption and is the industry standard (and contractually demanded by visa/mastercard). I think they will have a hard time claiming that anything less was 'appropriate'.