from Hacker News

3D Secure v2: A new authentication protocol

by inertial on 10/23/18, 7:03 PM with 1 comments

  • by mtgx on 10/23/18, 7:13 PM

    First thought: "frictionless authentication" sounds scary. It usually translates to "less secure authentication."

    Second thought: "Why would the banks agree so easily to take on the liability for 3D secure V2?

    > 3D Secure v2 will allow businesses and their payment provider to securely send over 100 data elements on each transaction to the cardholder’s bank. This includes payment-specific data like the shipping address, as well as contextual data, such as the customer’s device ID or previous transaction history.

    Third thought: "Ah, there it is. So it's another data grabbing strategy disguised as an upgrade in security."

    Fourth thought: "Will we be able to disable this so-called security feature?"