News for hackers. Stuff that matters.

A comment on Payment Request API. Parent comment

Re:Payment Request API by z1mm32m4n on Sunday September 17, 2017 @08:54PM (#15272618)
This also opens up the door to more secure payments. The "basic card" handler is one where the browser might just store your raw card number. But you can imagine that your bank might implement a payment handler that requires you to enter a 2fa code before using your card.

When it comes down to it, a credit card number is kind of serving double as a username and password for online payments right now. This new API has the potential to significantly improve upon the security of raw PANs.

[ Parent | on HN ]
Re:Payment Request API by jimktrains2 on Sunday September 17, 2017 @09:24PM (#15272733)
Just a clarification, a credit card number is an iin, pan, and checksum.

http://jimkeener.com/posts/everyday-numbers-1

[ Parent | on HN ]
Re:Payment Request API by lsaferite on Sunday September 17, 2017 @09:41PM (#15272792)
Interesting that the post says the term BIN (vs. IIN) isn't commonly used anymore, but it's practically the only thing I've heard them called in the last 10+ years of ecomm dev.
[ Parent | on HN ]
Re:Payment Request API by jimktrains2 on Sunday September 17, 2017 @09:59PM (#15272848)
I've seen both. When I wrote the post all the docs from the gateways I had access to called then iin with a historical note on bin. I done have access to those docs anymore though.
[ Parent | on HN ]
Re:Payment Request API by jimktrains2 on Monday September 18, 2017 @02:34AM (#15273800)
I've seen both. When I wrote the post all the docs from the gateways I had access to called it the iin with a historical note on bin. I don't have access to those docs anymore, though.

Edit: I really need to check when posting from my phone

[ Parent | on HN ]
Re:Payment Request API by lsaferite on Monday September 18, 2017 @07:37AM (#15274961)
I don't doubt you, but as an example, the recent notification of BIN/IIN prefix additions for Mastercard uses BIN 19 times and IIN 2 times.

https://www.mastercard.us/en-us/issuers/get-support/2-series...

[ Parent | on HN ]
Re:Payment Request API by jimktrains2 on Monday September 18, 2017 @01:36PM (#15277853)
Interesting, maybe I should update that page then.
[ Parent | on HN ]
Re:Payment Request API by cm2187 on Monday September 18, 2017 @04:49AM (#15274300)
That would be welcome. Half of the payment process on websites don't survive an adblocker and blocking third party cookies.
[ Parent | on HN ]