![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
Groan
What's the current geek take on Verified by Visa and Mastercard secure code?
I've now encountered Egg putting a block of some description on my card after I didn't sign up for Mastercard secure code while doing some online shopping a couple of weekends ago. I've now just tried to buy something else online and encountered a Mastercard secure code screen without a cancel function, got back to a screen to enter different card details and it took me to a verified by Visa screen.
I'm currently skeptical about the benefits of either scheme and don't see what else they add in terms of security and am pretty pissed off at retailers removing the ability to skip the screen. What do you think? Are they a useful security feature? Am I going to end up signing up for them on the basis of the process of least resistance in order to be able to do some shopping?
I've now encountered Egg putting a block of some description on my card after I didn't sign up for Mastercard secure code while doing some online shopping a couple of weekends ago. I've now just tried to buy something else online and encountered a Mastercard secure code screen without a cancel function, got back to a screen to enter different card details and it took me to a verified by Visa screen.
I'm currently skeptical about the benefits of either scheme and don't see what else they add in terms of security and am pretty pissed off at retailers removing the ability to skip the screen. What do you think? Are they a useful security feature? Am I going to end up signing up for them on the basis of the process of least resistance in order to be able to do some shopping?
no way of telling
Browsers can generally be persuaded to tell you where each frame comes from; but in practice I would not expect most users to even realize that they need to ask the question, much less explore probably unfamiliar bits of their browser's UI to find the answer.
Even if the URL used was actually visible I'd worry that many users wouldn't look there anyway.
I think a better answer would be where you look at the price, and then separately visit your online banking and charge up a one-time CC number with the required amount and then enter that CC number.
This would be fiddly at first but in principle you could integrate supporting features into the browser, though it'd be important to arrange that you could not emulate said feature using a web page.
(IIRC there are in fact CCs that have this property though I never got around to investigating further. They could only significantly reduce online fraud if they were actually required for online shopping though.)