EU DIRECTIVE ON SIGNATURES

[Ian Brown]

> This may work for small companies but will not work for corporations.

I agree entirely with your post -- I was just pointing out where a merchant
that took Visa orders would get Visa's top-level public key from.

Similarly, if the merchant wants to accept Mastercard payments they need
Mastercard's public key -- which they should get from Mastercard, not a
third party (however 'trusted')

As you say, if they receive an order *without* prepayment they need to make
credit decisions of their own.

Ian.