<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I’ve mentioned this to several people before because
OpenID is similar in architecture and intent to Visa’s 3-D Secure (the
technology behind Verified by Visa and Mastercard’s SecureCode –
password authentication for ecommerce use of credit cards), something I
spent a lot of time with while I was at Visa. 3-D Secure was deployed several
years ago and has met with varying levels of success. I’ve been
frustrated because the specs are not available publicly without executing a
license and thus lessons from 3-D secure are hard to discuss in the context of
OpenID. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I finally found a public summary of 3-D secure here: <a
href="http://partnernetwork.visa.com/pf/3dsec/download/trk_3dsec_system_overview_v102.pdf">http://partnernetwork.visa.com/pf/3dsec/download/trk_3dsec_system_overview_v102.pdf</a>
(there’s a ton of non-technical stuff, but there’s a good amount of
technical detail – page 15 onwards). <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>There’s also another less technical document
discussing the benefits and architecture of 3-D Secure for various
stakeholders: <a
href="http://partnernetwork.visa.com/pf/3dsec/download/trk_3dsec_intro_v102.pdf">http://partnernetwork.visa.com/pf/3dsec/download/trk_3dsec_intro_v102.pdf</a><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>The 3-D Secure main page is here: <a
href="http://partnernetwork.visa.com/pf/3dsec/main.jsp">http://partnernetwork.visa.com/pf/3dsec/main.jsp</a><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> -Gabe<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
</div>
</body>
</html>