2 ms·
PSD2 is a nice idea but nightmarish in practice. I used to use an app to track my finances and it would often fail to properly establish a "link" after successf
by dns_snek 3y ago
PSD2 is a nice idea but nightmarish in practice. I used to use an app to track my finances and it would often fail to properly establish a "link" after successful authentication with mysterious error messages, bank connections would just randomly fail to refresh their data for hours, even days at a time, their services provider (the party sitting between your bank and your budgeting app) SAID it would require re-auth every 90 days, but in practice it seemed to start requesting authentication after a month or so.
To access your own data, it needs to go from your bank, to a licensed Account Information Services Provider (AISP), to your budgeting app of choice, and finally to you. You can't utilize PSD2 without involving all of those 3rd parties because banks don't offer PSD2 APIs to consumers and I've only seen AISP services sold B2B. [1]
I'm someone who has no issues using 2FA everywhere and carrying around a Yubikey, but even I got fed-up with constant re-authentication requirements: Enter bank email & password, next, next, confirm, approve, yes I'm sure, now take out your phone, unlock it, open the bank app, log in there, confirm that prompt, yes, i'm really sure. Then it takes 1-2 minutes to "connect" your account and load the latest data. Repeat for every bank account, every 30 days.
It beats trusting your banking password to some random 3rd party, but it's a pretty terrible experience as an end-user if you ask me.
[1] Someone pointed out GoCardless which seems to accept private customers as well, a welcome surprise.