2 ms·
Well, card's MCU cannot validate the signature, but it can (and does) validate the PIN code. With chip+sign, if you lost the card, anyone can use it. They'll j
by drdaeman 9y ago
Well, card's MCU cannot validate the signature, but it can (and does) validate the PIN code.
With chip+sign, if you lost the card, anyone can use it. They'll just draw something remotely resembling the signature on card (if there's any) and that's it.
With chip+PIN, this isn't possible.
I think that's a significant difference.
- ars 9y agoThat is a difference, but it's not what I asked (because I already know about the security difference). He made it sound like there was a UI difference especially as regards transaction speed and convenience.
- Terretta 9y agoThere is. You insert card, type pin, hit enter, in one step. All that back and forth and waiting around in your UX discussion is for signatures done at a different step. This is most obvious when the chip reader doesn’t have a stylus and you’re waiting for bits of paper and signing those instead. It’ll really hit home in European cafes vs US restaurants.