i agree it's actually kind of bad that payment providers don't provide this page. todays technology could even render it on the webpage of the customer shop wit

i agree it's actually kind of bad that payment providers don't provide this page. todays technology could even render it on the webpage of the customer shop without redirecting fully to another page (scrpt scr=paymentproviderscript.bla? or so?). If people have to maintain and host their own script it makes them horrible prone to attack. In which case i'd rather have a payment provider who needs to secure it than every customer of the payment provider (reduces attack surface). i think paypal does good by providing this passive system and other providers should follow it, and perhaps if it's not to their liking innovate in this line instead of dumping their issues to the customer shop.