3 ms·
The standard allows for both options (and that switchability has led to security holes in the past[1]). Nowadays I think most of them validate the PIN on the s
by apenwarr 8y ago
The standard allows for both options (and that switchability has led to security holes in the past[1]). Nowadays I think most of them validate the PIN on the server side rather than on the chip, which is better in some ways.
[1] https://apenwarr.ca/log/20110222 https://apenwarr.ca/log/20110222