3 ms·

And physical addresses while we are at it. If you are shipping me something you need my address, but the fact that this became a mandatory part of authenticatin

by pavon 2y ago

And physical addresses while we are at it. If you are shipping me something you need my address, but the fact that this became a mandatory part of authenticating credit card purchases is so invasive and provides practicaly no real security.

Cu3PO42 2y ago
Depending on jurisdictions, it may not be about security, but just a regulatory requirement. I need to confirm any transaction made in the bank's app on my phone, so I feel my card is sufficiently secure in that sense. However, businesses here are required to collect my billing information for transactions that do not happen in person and unfortunately address is defined to be a part of that. That said, I fully agree with you. I see little reason that buying, for example, a video game online needs my billing information more than walking into a store and buying it there, possibly with the same card. This just reminded me of a quote: "If cash were invented today, it would be illegal." I forget who (first) said it, but it rings true.
- 35fbe7d3d5b9 2y ago
  > I see little reason that buying, for example, a video game online needs my billing information more than walking into a store and buying it there, possibly with the same card. In your latter example, a nexus clearly exists between the business selling you a video game and the state, so sales tax collection is patently obvious. When you buy online, they have to ask - it’s the only way to figure out the proper jurisdiction.
GoblinSlayer 2y ago
AFAIK, in USA they send some kind of invoice to your address. Not sure what it is or does though.
pjc50 2y ago
> but the fact that this became a mandatory part of authenticating credit card purchases is so invasive and provides practicaly no real security This is insurance against fraud where the card number is stolen and goods are ordered to a location other than the cardholder address. Which the merchant doesn't want to be liable for. So most places will only ship high value goods (sometimes any goods) to the cardholder address. The real security is now "enhanced verification", i.e. some sort of second factor and/or password in addition to the card. But this is much more annoying to use.
SideburnsOfDoom 2y ago
> provides practicaly no real security. pjc is correct, this does provide real security; i.e. I cannot steal your card details and use them to order valuable goods sent to my address.

by pavon 2y ago

Cu3PO42 2y ago

Depending on jurisdictions, it may not be about security, but just a regulatory requirement. I need to confirm any transaction made in the bank's app on my phone, so I feel my card is sufficiently secure in that sense. However, businesses here are required to collect my billing information for transactions that do not happen in person and unfortunately address is defined to be a part of that. That said, I fully agree with you. I see little reason that buying, for example, a video game online needs my billing information more than walking into a store and buying it there, possibly with the same card. This just reminded me of a quote: "If cash were invented today, it would be illegal." I forget who (first) said it, but it rings true.

35fbe7d3d5b9 2y ago
> I see little reason that buying, for example, a video game online needs my billing information more than walking into a store and buying it there, possibly with the same card. In your latter example, a nexus clearly exists between the business selling you a video game and the state, so sales tax collection is patently obvious. When you buy online, they have to ask - it’s the only way to figure out the proper jurisdiction.

GoblinSlayer 2y ago

AFAIK, in USA they send some kind of invoice to your address. Not sure what it is or does though.

pjc50 2y ago

> but the fact that this became a mandatory part of authenticating credit card purchases is so invasive and provides practicaly no real security This is insurance against fraud where the card number is stolen and goods are ordered to a location other than the cardholder address. Which the merchant doesn't want to be liable for. So most places will only ship high value goods (sometimes any goods) to the cardholder address. The real security is now "enhanced verification", i.e. some sort of second factor and/or password in addition to the card. But this is much more annoying to use.

SideburnsOfDoom 2y ago

> provides practicaly no real security. pjc is correct, this does provide real security; i.e. I cannot steal your card details and use them to order valuable goods sent to my address.