There are many online vendors selling all sorts of things that allow you to pay using your credit card. I want to know if there could realistically be some white-list (or even a blacklist) of such vendors that indicate where it is safe to share your credit-card info online.
I am not asking for a link to such a resource, but rather an indication of whether such resources would make sense to create, maintain and use. Have they ever existed with any reasonable success? Do any currently exist with reasonable success? Naturally, a prominent example is a good indication, but it's not what I'm specifically after.
Clearly such a list cannot be definitive, but it could definitely indicate where a vendor is definitely trusted. I imagine that such a list would mostly be maintained by customers reporting their experience. A history of good practice is clearly not something that a new business would have, so not being on the list does not mean that a vendor isn't trustworthy. But being on the list would make customers much more comfortable. Is such a thing a ridiculous notion and, if so, why?
I wasn't sure whether this was more on-topic here or at computer security, but I went with here as it deals with what the average user can do to be safer, rather than the details of, implementation of, or compromise of security systems. I was also unable to find a duplicate. I hope this is the right spot for it.
I'm not looking for "check if it's https" because that deals with ensuring that your information is not captured or tampered with by a third, malicious party, rather than ensuring that the vendor themselves are trustworthy. Installing an SSL certificate takes 15 minutes and costs less than $10 / year.
I know that fraud liability is limited or zero for credit cards. But I want to know if it is possible to prevent fraud, rather than deal with it.
The vendor needs to collect the card information themselves and then make the charge somehow. Secure, third-party payment gateways are not being asked about for obvious reasons. The same goes for payment schemes were I "send" someone money, rather than them "charging" me, such as EFTs or Paypal. The trust needs to be on the vendor to only charge for the correct amount the correct number of times.
The premise here is that a corrupt vendor could somehow get people to their site and then keep charging them. Or charge them too much. Or something. I'm not asking about how sustainable this model of crime is, I'm asking if there is a list of vendors who definitely aren't doing it. It is, of course, possible that the vendor is located somewhere where there is a higher tolerance of these things. They might also be a larger company that simply has a history of incorrect charges (unlikely, but always possible).