VISA => U2F from Anders Rundgren on 2014-05-21 (public-webpayments@w3.org from May 2014)

From: Anders Rundgren <anders.rundgren.net@gmail.com>
Date: Wed, 21 May 2014 14:33:33 +0200
To: Web Payments CG <public-webpayments@w3.org>
Message-ID: <537C9D1D.2040008@gmail.com>

https://fidoalliance.org/news/item/the-fido-alliance-welcomes-visa-to-the-board-of-directors

It seems that I'm not alone believing that building a payment future on passwords
isn't going anywhere.

The remaining issue is that U2F (AFAICT) doesn't address a distributed authentication
solution without also dragging in new hassles.

If VISA had tried to map U2F into 3D Secure they would have realized that U2F is
more suited for super-providers like PayPal, Google, Alibaba, and Apple.

The prospects for http://webpki.org/papers/PKI/pki-webcrypto.pdf look better
and better.

Anders

Received on Wednesday, 21 May 2014 12:34:07 UTC