The hidden three domains that secure your online payments
In short: When you shop online, a complex invisible handshake occurs between three distinct digital worlds. This protocol, known as 3-D Secure, aims to prevent fraud, yet its very design can sometimes shift the burden of risk from banks directly onto your shoulders.
Visa Inc. launched a critical initiative in late 1999, resulting in the creation of the 3-D Secure protocol by Celo Communications AB. internally named "p42". The name was a nod to the "answer to life, the universe, and everything" from The Hitchhiker's Guide to the Galaxy, reflecting the immense technical challenge the developers faced. Three distinct areas—the issuer, the merchant/acquirer, and the interoperability domains—work together to operate this protocol.
The mechanism relies on tying financial authorization to online authentication. During a transaction, a user might be redirected to a page provided by their card issuer to enter a password or a one-time code sent via SMS. While this is intended to protect against stolen card details, the implementation has significant nuances. For instance, many issuers outsource their Access Control Server (ACS) to third parties. This often results in the user's browser connecting to an unfamiliar domain, which can increase the surface area for phishing attacks.
The evolution of the protocol has addressed several early shortcomings. While the original version faced criticism for security issues and liability shifts, the 2016 publication of EMV 3-D Secure (Version 2) was designed to comply with EU authentication requirements. This newer version is less intrusive, using contextual data like transaction history to assess risk, only triggering an authentication challenge when a transaction is deemed high-risk. However, critics note that some implementations, such as activation-during-shopping, can still invite risks by forcing users to provide sensitive information within unverified frames.
Opens the Intellect+ feed with this card first. Swipe up for the next one.
Sources
- Summary by Intellect · source: 3-D Secure
To cite this card, link to https://intellectplus.co.uk/app/health-3-d-secure.
How we source, check and correct cards: Editorial standards.
General information, not professional advice. Spotted an error? Flag the card or see corrections and complaints.
Intellect Plus is a visual educational discovery platform for exploring fascinating facts and ideas. Brain Food, Not Brain Rot. What is Intellect Plus?
Related
More in Cybersecurity · More in Technology · Latest · A–Z · All topics
