3 ms·
Verified by Visa has a pretty bad design flaw: the recommended implementation uses an iframe to load the page that prompts for your password, so it's not obviou
by chrisbolt 14y ago
Verified by Visa has a pretty bad design flaw: the recommended implementation uses an iframe to load the page that prompts for your password, so it's not obvious if that iframe is legitimate or a phishing attack.
- ljoshua 14y agoAlso, VbV unloads a lot of the security burden to the consumer: http://news.ycombinator.com/item?id=1909862 http://news.ycombinator.com/item?id=1909862