[663] in WWW Security List Archive
Re: Credit Card Security
daemon@ATHENA.MIT.EDU (Brian W. Spolarich)
Tue May 2 23:45:35 1995
Date: Tue, 2 May 1995 20:04:53 -0400 (EDT)
From: "Brian W. Spolarich" <briansp@umich.edu>
To: Marc VanHeyningen <marcvh@spry.com>
cc: Paul Rarey <Paul.Rarey@Systems.DHL.COM>, www-security@ns1.rutgers.edu
In-Reply-To: <1041.799457646@pellet.spry.com>
Errors-To: owner-www-security@ns2.rutgers.edu
On Tue, 2 May 1995, Marc VanHeyningen wrote:
> This is a limitation of credit cards in general, not FV. Credit cards are
> not designed to work well with transactions of small amounts.
You're right. I suppose its then up to the seller to compile monthly
usage of a service or metered product and post the charges to the user's
card at the end of the month or billing period. This would imply a
relationship of trust that the seller is keeping accurate records,
however, and there is less ability to trace individual transactions.
Problematic either way...
> Real people have multiple credit cards from various places, depending
> who offers the best deal, and have multiple credit card numbers to manage.
> We seem to get by somehow. We have multiple credit cards, multiple keys,
> multiple most everything related to money and security. I don't expect the
> situation to be that different as things move online.
But the difference here is that the management of these multiple
accounts is all based on a card number/expiration date pair, and mediated
by my authentication (sometimes) by matching my picture on the card or my
license.
We need to make this as simple as possible in an electronic medium.
One basic credential for individual authentication seems to be a workable
model to me.
-brian
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Brian W. Spolarich briansp@umich.edu
U-M ITD/US WWW Services Coordinator http://www.itd.umich.edu/
Despite the high cost of living, it remains popular, survey says...
