3 ms·
It's the same as Secure3D for Visa, right? It is actually kind of secure because the card processor never gets or knows your extra code, but the implementation
by henrikschroder 17y ago
It's the same as Secure3D for Visa, right?
It is actually kind of secure because the card processor never gets or knows your extra code, but the implementation is atrocious since it requires the website wanting your money to display a webpage from your bank. The odds of that page integrating nicely with the website's payment flow is kinda non-existant, and always sets my fraud alert spinning.
- pierrefar 17y agoThe fact it's always on a separate domain doesn't help either.
- mmelin 17y agoVisa calls it "Verified by Visa", actually. The common name is 3-D Secure. And yes, the implementation sucks, especially since you're dependent on the _issuing_ bank being able to keep their 3-D Secure server up (which serves the auth step).