I'm setting up an e-commerce site using Ubercart for a business that already accepts phone orders. We have one brand that already has an e-commerce site, but it uses VirtualCart (vcart.com I think it is), which was set up by someone else that used to work here before I got here and no one really knows anything about it. As far as I can tell it's a full-service payment thing with manually placed JS bits in the static HTML site. Even if we could use that account to manage this brand too, I'm not sure we'd want to since there's no VirtualCart module for Ubercart and it's an ugly system anyway.
Ideally, I'd like to use something like PayPal but my boss hates PayPal (go figure). He wants credit card processing, but is wary of processing them on our site with an SSL cert, because if something went wrong we'd be liable (right?).
We use 1&1. Currently just a beginner plan, but we can add an SSL cert for $49/year.
So my options are:
1. get an SSL cert and use the CC module alone (is that all? is it secure? safe? recommended?)
2. use VirtualCart and basically drop Ubercart alltogether (sad
)
3. find another payment gateway service that integrates with Ubercart (recommendations?)
Thanks a bunch. I've been looking through the documentation and forums but I thought I'd post this anyway and maybe someone has some good advice for me. 
