2 ms·
That's more or less what I was saying? My european bank card is a debet card. If I pay online, it redirects to a page for my bank. This does a 2 factor authe
by hyperman1 6y ago
That's more or less what I was saying? My european bank card is a debet card. If I pay online, it redirects to a page for my bank. This does a 2 factor authentication. The 2FA challenge contains the monetary amount and the IBAN check digits, so even MITM is hard.
- guitarbill 6y agoThere's also 3-D Secure, which e.g. UK banks have implemented. This is a solved problem with sane solutions, just like chip&pin, and not using cheques. [0] https://en.wikipedia.org/wiki/3-D_Secure https://en.wikipedia.org/wiki/3-D_Secure
- ryanlol 6y ago3-D secure is still extremely vulnerable to phishing. And when you do get phished, you’ll generally be in a far worse position than you’d be without it. Sane solution? For merchants, maybe. For consumers, no.
- ryanlol 6y agoYour bank doesn’t enforce this, the merchant accepting the payment chooses to require this.