CC shared secret

Andy Cunningham ukcrypto at chiark.greenend.org.uk
Wed, 6 Aug 2008 12:17:07 +0100


On Wed, Aug 06, 2008 at 11:59:24AM +0100, Wendy M. Grossman wrote:

>> Or is the *whole* Visa scheme just a franchise, with merchants having 
>> to have a credit-authorising dialogue with the relevant bank rather 
>> than a central Visa-branded clearing house?
>
> Which would imply yes, that banks do it differently from each other.  
> Mine is on a Barclaycard, if that helps.

It's a franchise, but there are multiple providers.  I'm not clear on
how the various redirections take place.

> What frosts me is that adding VfV to the list of hoops you have to jump  
> through to put through a purchase doesn't make the bank any less likely  
> to decide the transaction is dubious and stop your card.

VbV can be integrated with other risk analysis tools.  Whether or not
a given bank chooses to implement this level of sophistication will
depend on their mitigation strategy for fraud losses.  

Andy