4 ms·

Doesn't Verified by Visa and SecurePay by Mastercard solve this problem? Whenever I enter a credit card I get asked to enter an online password as well. Of cou

by haroldu 14y ago

Doesn't Verified by Visa and SecurePay by Mastercard solve this problem? Whenever I enter a credit card I get asked to enter an online password as well. Of course, ideally every citizen would be able to sign anything with a public-private key pair, counter-signed by the state.

jevinskie 14y ago
I hated when Newegg started using Verified by Visa. The password requirements were so silly that I would always forget my password. I haven't been prompted to enter my VbV password at Newegg for some years.
borlak 14y ago
Verified by Visa is incredibly annoying to the consumer. I've abandoned payments because I forgot my password. Now I have it turned off completely.
- retube 14y ago
  How do you turn it off?
  - borlak 14y ago
    I haven't had to use it in a long time so my memory is fuzzy...but last I remember, when the actual Verified by Visa form pops up, there is an option to disable it.
jsnell 14y ago
Verified by Visa is an extremely high friction mechanism. It requires registration the first time around for each CC, and also an extra password or some other authentication mechanism like a bank dongle. If significant people bounce off transactions due to needing to type in their address, or due to needing to flip over the credit card and read 3 numbers, I don't even dare to think of what the bounce rate is for these mechanisms. It's especially bad since just about no websites I ever buy anything from use VbV / SecurePay. That means that I don't remember the authentication secrets off the top of my head, so unless I'm at home will likely abort the extremely rare transactions that really require it. I've maybe needed VbV once in the last year, and had to try 3 cards before I found one that I could use on the spot.
- henrikschroder 14y ago
  It's gotten better, but the implementations the first years were abysmally bad. You're in this somewhat skinned payment flow, and then suddenly you're redirected to an un-skinned page, that maybe has your bank's logo on it, that asks for your secret password, or asks you to log in to your internet bank. And you would be on some sort of unrecognizable third-party url, because the merchant redirected you to their payment processor's webpage, which through 3DSecure redirected you to your bank, which in turn redirected you to some partner they used for that, because the bank couldn't figure out how to do it in less than three years because making software is hard or something. I think I abandoned every such purchase on reflex because it just screamed phishing attempt each time. Extremely high friction indeed. Most merchants these days give me the option to skip it. Thank you.
  - khuey 14y ago
    Verified by Visa is incredibly obnoxious. Thankfully its very uncommon in North America. Seems to be much more popular in Europe (or maybe European sites just force VbV for my US-issued Visa).
- jusben1369 14y ago
  Important to note that companies can turn off verified by visa but then they pay a higher transaction/processing fee. So many merchants dislike it significantly but then pay higher rates. Fun place to be. I wonder how Stripe will handle 3DS with their UK launch given I've heard it has as much as 80% penetration into online sales?
DanBC 14y ago
I loathe 'Verified by Visa'. I changed credit cards so that I can avoid it. It's thoroughly stupid and broken.
jan_g 14y ago
There's also an enhanced version of 'Verified by Visa' and 'SecurePay': at your bank you order OTP calculator/card reader and for every online purchase with your credit card, you are prompted for OTP passcode. This card reader costs about 30 euros. Mine looks like this: http://www.vasco.com/products/client_products/card_reader_digipass/digipass_810.aspx http://www.vasco.com/products/client_products/card_reader_di...
pfredrich 14y ago
Kills fraud and also conversion and revenue. Such a pain.
sneak 14y ago
> Of course, ideally every citizen would be able to sign anything with a public-private key pair, counter-signed by the state. State-verified identity for payments is your ideal case? Have you heard of Wikileaks?

by haroldu 14y ago

jevinskie 14y ago

I hated when Newegg started using Verified by Visa. The password requirements were so silly that I would always forget my password. I haven't been prompted to enter my VbV password at Newegg for some years.

borlak 14y ago

Verified by Visa is incredibly annoying to the consumer. I've abandoned payments because I forgot my password. Now I have it turned off completely.

retube 14y ago
How do you turn it off?
- borlak 14y ago
  I haven't had to use it in a long time so my memory is fuzzy...but last I remember, when the actual Verified by Visa form pops up, there is an option to disable it.

jsnell 14y ago

Verified by Visa is an extremely high friction mechanism. It requires registration the first time around for each CC, and also an extra password or some other authentication mechanism like a bank dongle. If significant people bounce off transactions due to needing to type in their address, or due to needing to flip over the credit card and read 3 numbers, I don't even dare to think of what the bounce rate is for these mechanisms. It's especially bad since just about no websites I ever buy anything from use VbV / SecurePay. That means that I don't remember the authentication secrets off the top of my head, so unless I'm at home will likely abort the extremely rare transactions that really require it. I've maybe needed VbV once in the last year, and had to try 3 cards before I found one that I could use on the spot.

henrikschroder 14y ago
It's gotten better, but the implementations the first years were abysmally bad. You're in this somewhat skinned payment flow, and then suddenly you're redirected to an un-skinned page, that maybe has your bank's logo on it, that asks for your secret password, or asks you to log in to your internet bank. And you would be on some sort of unrecognizable third-party url, because the merchant redirected you to their payment processor's webpage, which through 3DSecure redirected you to your bank, which in turn redirected you to some partner they used for that, because the bank couldn't figure out how to do it in less than three years because making software is hard or something. I think I abandoned every such purchase on reflex because it just screamed phishing attempt each time. Extremely high friction indeed. Most merchants these days give me the option to skip it. Thank you.
- khuey 14y ago
  Verified by Visa is incredibly obnoxious. Thankfully its very uncommon in North America. Seems to be much more popular in Europe (or maybe European sites just force VbV for my US-issued Visa).
jusben1369 14y ago
Important to note that companies can turn off verified by visa but then they pay a higher transaction/processing fee. So many merchants dislike it significantly but then pay higher rates. Fun place to be. I wonder how Stripe will handle 3DS with their UK launch given I've heard it has as much as 80% penetration into online sales?

DanBC 14y ago

I loathe 'Verified by Visa'. I changed credit cards so that I can avoid it. It's thoroughly stupid and broken.

jan_g 14y ago

There's also an enhanced version of 'Verified by Visa' and 'SecurePay': at your bank you order OTP calculator/card reader and for every online purchase with your credit card, you are prompted for OTP passcode. This card reader costs about 30 euros. Mine looks like this: http://www.vasco.com/products/client_products/card_reader_digipass/digipass_810.aspx http://www.vasco.com/products/client_products/card_reader_di...

pfredrich 14y ago

Kills fraud and also conversion and revenue. Such a pain.

sneak 14y ago

> Of course, ideally every citizen would be able to sign anything with a public-private key pair, counter-signed by the state. State-verified identity for payments is your ideal case? Have you heard of Wikileaks?