On 2012-08-02 13:22, Jean-Marc Desperrier wrote: > Anders Rundgren a écrit : >> http://www.finextra.com/news/announcement.aspx?pressreleaseid=45624 >> >> Current platforms are useless for banking so what else could they do? > > What role does the password serve here, except forcing me to create an > unrequired account by every merchant I decide to use ?
3D Secure/VbV is a kind of federation system where a payment request is routed to your bank/issuer which vouches for that you are an authentic card-holder. Here VISA dropped the password requirement and thus in fact the whole routing/vouching scheme. I.e. the global VISA standard for Internet payments is using a "user id" (Card number) plus "password" (CCV) distributed in clear on plastic cards. Going back to the platform, <keygen> simply doesn't cut it, never did. In Asia and Scandinavia the banks therefore deploy their own PKI clients. Anders -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
