Re: [w3c/3ds] Some high-level issues to discuss (#2)

@asolove-stripe Right, so we agree there's a gap here. Now we just need to fill it. :-) 

Part of the worry is that although merchant sites can get into PCI trouble (however, I don't see device authentication data mentioned in PCI DSS v3.2), we also hear with some frequency that we have to make deployment a no-brainer for them because they're not always tech savvy (and thus we have to wonder if they have good security control over or even insight into what scripts they allow to run on their sites for lead gen, marketing, advertising, etc. - and what those scripts are really doing).

Your mention of conversion rate is key, since that seems to be the main reason why 3DS 1.0 failed in the marketplace...

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/3ds/issues/2#issuecomment-365038945