I spend ££££52 gazillion per year on web - Never really had problem

Of late Debit/Credit cards having been trying to persuade me to sign up for
some extra online security feature that will basically shorten my life by
one hour everytime i buy something

So far there has been a box saying "not at this time" - which i click,
finish my purchase and carry on with my otherwise pedestrian life

Just tried to buy game from Tesco, and after spending 3 weeks creating new
account and entering all my card details, etc, yaaaaaaaaaawn! i tried to
checkout and was greeted with:


"Authentication Required For Purchase"
"Your card can be registered now for Verified by Visa - a new, free security
service to help prevent unauthorised use of this card when shopping online.
It is required for this purchase, which cannot be made without it."

"Complete the form below [...and die of boredom]"


Although the operative word is still in use here "card ****CAN***
be registered"

It wont let me complete the purchase without completing the form - so in
fact they mean "card ****MUST*** be registered"

Slip of the tongue maybe - hope someone slips a mallet into the head of the
poster of this big brother message

Question: Is online verification now compulsory or still supposedly
optional?????????


P.S. Oh yeah - cancelled the purchase and bought game from play.com instead

"Chris K" wrote in message
...
I spend ££££52 gazillion per year on web - Never really had problem

Of late Debit/Credit cards having been trying to persuade me to sign up
for some extra online security feature that will basically shorten my life
by one hour everytime i buy something

So far there has been a box saying "not at this time" - which i click,
finish my purchase and carry on with my otherwise pedestrian life

Just tried to buy game from Tesco, and after spending 3 weeks creating new
account and entering all my card details, etc, yaaaaaaaaaawn! i tried to
checkout and was greeted with:


"Authentication Required For Purchase"
"Your card can be registered now for Verified by Visa - a new, free
security service to help prevent unauthorised use of this card when
shopping online. It is required for this purchase, which cannot be made
without it."

"Complete the form below [...and die of boredom]"


Although the operative word is still in use here "card ****CAN*** be
registered"

It wont let me complete the purchase without completing the form - so in
fact they mean "card ****MUST*** be registered"

Slip of the tongue maybe - hope someone slips a mallet into the head of
the poster of this big brother message

Question: Is online verification now compulsory or still supposedly
optional?????????


P.S. Oh yeah - cancelled the purchase and bought game from play.com
instead










I use Verification on my MasterCard and it adds 10 seconds to a
purchase...........you just have to enter a password.

On 6/19/2010 3:23 PM, Chris K wrote:
I spend ££££52 gazillion per year on web - Never really had problem

Of late Debit/Credit cards having been trying to persuade me to sign up
for some extra online security feature that will basically shorten my
life by one hour everytime i buy something

So far there has been a box saying "not at this time" - which i click,
finish my purchase and carry on with my otherwise pedestrian life

Just tried to buy game from Tesco, and after spending 3 weeks creating
new account and entering all my card details, etc, yaaaaaaaaaawn! i
tried to checkout and was greeted with:


"Authentication Required For Purchase"
"Your card can be registered now for Verified by Visa - a new, free
security service to help prevent unauthorised use of this card when
shopping online. It is required for this purchase, which cannot be made
without it."

"Complete the form below [...and die of boredom]"


Although the operative word is still in use here "card ****CAN*** be
registered"

It wont let me complete the purchase without completing the form - so in
fact they mean "card ****MUST*** be registered"

Slip of the tongue maybe - hope someone slips a mallet into the head of
the poster of this big brother message

Question: Is online verification now compulsory or still supposedly
optional?????????


No. It's 'optional' on my site, but I have to pay a monthly fee to the
merchant for that privilege - I figured I'd be better off not losing the
sales...


P.S. Oh yeah - cancelled the purchase and bought game from play.com instead

Chris K wrote:

So far there has been a box saying "not at this time" - which i click,
finish my purchase and carry on with my otherwise pedestrian life

I believe you are only allowed to defer three (two?) times.

Please be careful with 3D Secure services, like this. Neither the banks
nor the merchants seem to understand how to operate them securely.

Firstly, ignore the confirmation phrase that you supply, unless it
really is wrong. It is a trivial man in the middle attack to obtain
this. Next check that the frame or page really is coming from your bank.

On the second point, there are two problems. Firstly some banks use the
US company, who operate the service's, domain name on the form page. As
it is unlikely that your bank has told you this over a secure channel,
and unlikely that their first line support people will understand the
problem, you are on your own in ensuring that the source of the page
really is trustworthy in relation to your bank.

The second problem is that some organisations, including, at least an
one time, British Gas, and a major card processing service, really do go
man in the middle, and send the form from their site. Unless you are an
expert in HTML and Javascript, it will be difficult to be sure that what
you submit has gone directly to your bank, and certain that someone
other than your bank has had access to the confirmation phrase. You
cannot rely on the fact that your browser says the form will submit
directly to the bank, as this can be changed by scripting, after you
press the script button.

Even where they don't embed the form in their own page, they will often
try to obscure its origins using IFRAME, making checking a hassle.

My policy is that, if I am unable to verify that the form has come
directly from the bank, or their known 3D Secure agents, I will either
abort the transaction, or change the password, immediately after the
transaction.

I believe the card processing service I mentioned, now does things properly.

Retailers tend to be held responsible for chargebacks if 3D Secure is
not in effect, and customers tend not to be able to make them if it is
in effect.

Mark Opolo wrote:
"Chris K" wrote in message
...
I spend ££££52 gazillion per year on web - Never really had problem

Of late Debit/Credit cards having been trying to persuade me to sign
up for some extra online security feature that will basically
shorten my life by one hour everytime i buy something

So far there has been a box saying "not at this time" - which i
click, finish my purchase and carry on with my otherwise pedestrian
life Just tried to buy game from Tesco, and after spending 3 weeks
creating new account and entering all my card details, etc,
yaaaaaaaaaawn! i tried to checkout and was greeted with:


"Authentication Required For Purchase"
"Your card can be registered now for Verified by Visa - a new, free
security service to help prevent unauthorised use of this card when
shopping online. It is required for this purchase, which cannot be
made without it."

"Complete the form below [...and die of boredom]"


Although the operative word is still in use here "card ****CAN***
be registered"

It wont let me complete the purchase without completing the form -
so in fact they mean "card ****MUST*** be registered"

Slip of the tongue maybe - hope someone slips a mallet into the head
of the poster of this big brother message

Question: Is online verification now compulsory or still supposedly
optional?????????


P.S. Oh yeah - cancelled the purchase and bought game from play.com
instead










I use Verification on my MasterCard and it adds 10 seconds to a
purchase...........you just have to enter a password.

And not even the full password!

--
Kev

Chris K wrote:
I spend ££££52 gazillion per year on web - Never really had problem

Of late Debit/Credit cards having been trying to persuade me to sign up
for some extra online security feature that will basically shorten my
life by one hour everytime i buy something

So far there has been a box saying "not at this time" - which i click,
finish my purchase and carry on with my otherwise pedestrian life

Just tried to buy game from Tesco, and after spending 3 weeks creating
new account and entering all my card details, etc, yaaaaaaaaaawn! i
tried to checkout and was greeted with:


"Authentication Required For Purchase"
"Your card can be registered now for Verified by Visa - a new, free
security service to help prevent unauthorised use of this card when
shopping online. It is required for this purchase, which cannot be made
without it."

"Complete the form below [...and die of boredom]"


Although the operative word is still in use here "card ****CAN*** be
registered"

It wont let me complete the purchase without completing the form - so in
fact they mean "card ****MUST*** be registered"

Slip of the tongue maybe - hope someone slips a mallet into the head of
the poster of this big brother message

Question: Is online verification now compulsory or still supposedly
optional?????????


P.S. Oh yeah - cancelled the purchase and bought game from play.com instead










What the **** are you on about?

"Mark Opolo" wrote in message
...

"Chris K" wrote in message
...
I spend ££££52 gazillion per year on web - Never really had problem

Of late Debit/Credit cards having been trying to persuade me to sign up
for some extra online security feature that will basically shorten my
life by one hour everytime i buy something

So far there has been a box saying "not at this time" - which i click,
finish my purchase and carry on with my otherwise pedestrian life

Just tried to buy game from Tesco, and after spending 3 weeks creating
new account and entering all my card details, etc, yaaaaaaaaaawn! i tried
to checkout and was greeted with:


"Authentication Required For Purchase"
"Your card can be registered now for Verified by Visa - a new, free
security service to help prevent unauthorised use of this card when
shopping online. It is required for this purchase, which cannot be made
without it."

"Complete the form below [...and die of boredom]"


Although the operative word is still in use here "card ****CAN*** be
registered"

It wont let me complete the purchase without completing the form - so in
fact they mean "card ****MUST*** be registered"

Slip of the tongue maybe - hope someone slips a mallet into the head of
the poster of this big brother message

Question: Is online verification now compulsory or still supposedly
optional?????????


P.S. Oh yeah - cancelled the purchase and bought game from play.com
instead










I use Verification on my MasterCard and it adds 10 seconds to a
purchase...........you just have to enter a password.

I'm asked so rarely I've forgotten it,

so then I have to go through the rigmarole of resetting it.

A right PITA

Of course, I could write it down :-(

tim

Chris K wrote:

I spend ££££52 gazillion per year on web - Never really had problem

Of late Debit/Credit cards having been trying to persuade me to sign up for
some extra online security feature that will basically shorten my life by
one hour everytime i buy something

So far there has been a box saying "not at this time" - which i click,
finish my purchase and carry on with my otherwise pedestrian life

Just tried to buy game from Tesco, and after spending 3 weeks creating new
account and entering all my card details, etc, yaaaaaaaaaawn! i tried to
checkout and was greeted with:

"Authentication Required For Purchase"
"Your card can be registered now for Verified by Visa - a new, free security
service to help prevent unauthorised use of this card when shopping online.
It is required for this purchase, which cannot be made without it."

"Complete the form below [...and die of boredom]"

Although the operative word is still in use here "card ****CAN***
be registered"

It wont let me complete the purchase without completing the form - so in
fact they mean "card ****MUST*** be registered"

Slip of the tongue maybe - hope someone slips a mallet into the head of the
poster of this big brother message

Question: Is online verification now compulsory or still supposedly
optional?????????

P.S. Oh yeah - cancelled the purchase and bought game from play.com instead


Depends on the internet retailer; some use it, some don't. I don't see any
problem with extra security.

johannes wrote:


Depends on the internet retailer; some use it, some don't. I don't see any
problem with extra security.

As implemented, it doesn't add security, but does give the banks an
excuse to reject claims that your card was used fraudulently. It could
be secure, if they taught people how to use the security in their
browsers properly and insisted that the form be served, unframed,
directly from a site with an SSL certificate for the bank. However
merchants like to present a seamless interface, where their payment
agents and banks don't appear overtly.

The confirmation phrase is snake oil. Anyone with your basic card
details can get it.

On 6/19/2010 4:23 PM, johannes wrote:


Chris K wrote:

I spend ££££52 gazillion per year on web - Never really had problem

Of late Debit/Credit cards having been trying to persuade me to sign up for
some extra online security feature that will basically shorten my life by
one hour everytime i buy something

So far there has been a box saying "not at this time" - which i click,
finish my purchase and carry on with my otherwise pedestrian life

Just tried to buy game from Tesco, and after spending 3 weeks creating new
account and entering all my card details, etc, yaaaaaaaaaawn! i tried to
checkout and was greeted with:

"Authentication Required For Purchase"
"Your card can be registered now for Verified by Visa - a new, free security
service to help prevent unauthorised use of this card when shopping online.
It is required for this purchase, which cannot be made without it

"Complete the form below [...and die of boredom]"

Although the operative word is still in use here "card ****CAN***
be registered"

It wont let me complete the purchase without completing the form - so in
fact they mean "card ****MUST*** be registered"

Slip of the tongue maybe - hope someone slips a mallet into the head of the
poster of this big brother message

Question: Is online verification now compulsory or still supposedly
optional?????????

P.S. Oh yeah - cancelled the purchase and bought game from play.com instead


Depends on the internet retailer; some use it, some don't. I don't see any
problem with extra security.

It was optional to retailers at no cost until a few months ago - now
it's only optional if the retailer pays extra monthly fee to the
merchant bank. I guess that sooner or later it won't be optional at all.