Co-op Bank and Verified by Visa

[signup at bealoid.co.uk]

Quoting Richard Brooksby <rb at ravenbrook.com>:

> Any advice or suggestions?

The people you're talking to at the bank have no idea about what a  
secure system would be.  (Or they do know, but are not in a position  
to be able to implement it.)  They have to stick to some script.   
They're unlikely to start saying "I know it sucks, you know it sucks,  
but it's a bit of extra fluff that we can use to avoid paying up if  
someone is defrauded".

So, you'll need to create an email that assumes people have no  
knowledge of crypto or security.  Use flow diagrams to show  
information exchange.  (Circles for trusted groups, jaggy rhomboids  
for unknown sites).

> I don't want to leave Co-op, but I might have to get a card from  
> someone else with a better security policy.

THEY ALL SUCK.  It is baffling to me how a group of companies that  
i)earn billions in profit each year and ii)lose many millions in fraud  
and iii)have many dissatisfied customers manage to make so many stupid  
errors in security.