Recent content by colinpickup

  1. C

    3D Secure - not asking for passwords anymore?

    Yeah, if 3D Secure is passed then that basically means the bank is accepting the liability shift. Them doing this without a password does seems to be happening now, however, meaning either they're OKing any old transaction or they've determined some other criteria they can work on. The IP...
  2. C

    3D Secure - not asking for passwords anymore?

    If that were the case, then why does 3D secure exist in the first place? Why not just keep the liability with the merchant? If the banks aren't able to keep 3D Secure auth servers up 24/7, you have to imagine the technology is expensive to run securely. The question is whether or not any...
  3. C

    3D Secure - not asking for passwords anymore?

    When 3D Secure gives an Authenticated (MPI Code 237) response, that basically means that the card-holder's bank is willing to accept the liability shift to itself. The criteria that the banks set to do this really lie with the bank and, although most banks require a password, some only require...