5 ms·

A few years ago in Ukraine all (most?) online transactions had to be verified via their service called "masterpass". I guess it's their approach to 3DS or somet

A few years ago in Ukraine all (most?) online transactions had to be verified via their service called "masterpass". I guess it's their approach to 3DS or something. Anyway, their SSL certificate expired, as it naturally does with enterprise webs. All (most?) online transactions with certain class of MasterCard cards were completely SOL at that moment. They did not renew the cert for more than a year. No amount of communication attempts with MasterCard could help, neither from customers (me) nor from banks' IT departments. Then they just quietly dropped the service altogether. While I was poking I have found that the service is written in microsoft-something (IIS), certificate chain was unusually long with intermediates which I never heard of and all of that is hosted in a third-world country quite far away from Ukraine. But that's another story.

0x457 2y ago
masterpass is MC's version of 3DS. It's used by MC worldwide when transaction is sus. I guess, in MC's eyes, transactions in your country are considered sus by default even if they entirely between local entities. I don't remember it's ever expiring, at least in the US. IDK how they handle traffic in different countries. It sounds a lot more like your traffic got routed somewhere else and not MC?
- 1oooqooq 2y ago
  masterpass et all are triggered more by suspicion of the vendor than the client. but i guess it can be both...
  - 0x457 2y ago
    It's both. I got 3ds triggered on a vendor I used all the time, but one time I bought from it while I was in Vietnam - hello secondary verification screen. Also happened for vendor that I had no issues with, but when I used my card from not-US bank - secondary verification screen. Suspicion on the vendor usually, at least with my banks, triggers a fraud alert that I have to respond. 3DS on the other hand is to verify that the person making a payment is the rightful cardholder. Masterpass also doesn't always redirect to that verification screen.

0x457 2y ago

masterpass is MC's version of 3DS. It's used by MC worldwide when transaction is sus. I guess, in MC's eyes, transactions in your country are considered sus by default even if they entirely between local entities. I don't remember it's ever expiring, at least in the US. IDK how they handle traffic in different countries. It sounds a lot more like your traffic got routed somewhere else and not MC?

1oooqooq 2y ago
masterpass et all are triggered more by suspicion of the vendor than the client. but i guess it can be both...
- 0x457 2y ago
  It's both. I got 3ds triggered on a vendor I used all the time, but one time I bought from it while I was in Vietnam - hello secondary verification screen. Also happened for vendor that I had no issues with, but when I used my card from not-US bank - secondary verification screen. Suspicion on the vendor usually, at least with my banks, triggers a fraud alert that I have to respond. 3DS on the other hand is to verify that the person making a payment is the rightful cardholder. Masterpass also doesn't always redirect to that verification screen.