3 ms·
I meant that ideally, they should be using the same domain as the bank itself. However, it's not uncommon for banks to use the ACS domain their vendor provides,
by sirn 5y ago
I meant that ideally, they should be using the same domain as the bank itself. However, it's not uncommon for banks to use the ACS domain their vendor provides, which is the case here. The ACS vendor still requires passing PCI-3DS and PCI-DSS in either case, though.
- JPLeRouzic 5y ago> I meant that ideally, they should be using the same domain as the bank itself. I do agree, it always annoys me to see services spread many stakeholders with no one clearly identified as the responsible for the service.