I know what you mean about protx being simple craigix. I did some emergency work on a client site that used protx a year ago.
The issue I have is that as you say, it's "no nonsense, no fees etc." but it's also no security. It allows credit/debit card details to be stored online without encryption. The shock I got when working on the clients site was that customers details (prior) to verification were all stored unencypted in a bog standard mysql databse which the retailer had full access to. That's full contact details, card number, dates, and the 3 digit security code. All sitting there for the taking. These details are only cleared after verification.
I guess my take is that a system should take details and verify immediately or it should kill the transaction and inform the client that the payment could not be verified.
A client could just as easily phone yourselves and give details over the phone with a CNP transaction, as I'm sure you have done in the past, in that instance though the client relies on trust in yourself as a retailer and assume that their details will be used to run the transaction and then destroyed.
In the case of stored details you have an issue wherein despite best practice details are stored in a manner which opens up possibilities for exploitation by unknown users who you have not given your trust to and this could be avoided by simply not storing the details.
To sum up why I dislike Protx. I looked at their system and was shown full details of someone's credit card, address, etc. I would hate to think that my card was open to the same type treatment.
Worldpay, Paypal etc. are more expensive but in the case of someone like Worldpay you are getting a more secure and trusted service (at a premium) The cost includes a valuable (perceived or otherwise) amount of trust that you can pass on to your customers. Rather like airbags in cars. As a consumer I want on that works and provides safety at a reasonable cost rather than a cheaper one that offers limited safety at a reduced cost. It's down to the retailer to decide which option he uses but the end result also directly affects the consumer.
With reference to Paypal, I know they are considered foul and unholy but there's no small amount of "social inertia" there. They used to be bad as they were one of the first names to "make it big". As a result of repeated kickings in the cyberpress (yuck) they now go twice as far as the competition to compensate for their (perhaps undeserved) reputation.
My advice as a consumer would be to use worldpay, the api is straighforward and there is a recognised name with a guarantee of good practice. Factor the extra cost against the price of the goods.
I would rather buy from yourselves and pay a small amount more to ensure fast delivery and your level of service. You have good ties with the community and are more than just a "fair-weather friend" to console sales. Perhaps I could buy from asia and get a bag of sweets, however I am pretty sure that with gbax I will be guaranteed good service, and good advice. That is worth the extra money in my book and I'm sure a lot of people in the "scene" would agree
Let's face it, there aren't many dedicated retailers who take such an active part in the community, post firmware updates, etc.
With ref: to thunderbird, my apologies. I figured that removing the attachments itself would have sufficed. Receiving the mail (minus the attachment) allows you to blacklist appropriately and also catch mail from people who have inadvertently attached something (winmail.dat, "this email has been scanned and is virus free" notices etc.)
