[Openid-specs-fapi] OBIE trustee recommendations

[Anders Rundgren]

On 2023-02-03 23:00, Joseph Heenan via Openid-specs-fapi wrote:
> 
> 
>> On 3 Feb 2023, at 20:22, Anders Rundgren <anders.rundgren.net at gmail.com> wrote:
>>
>> On 2023-02-03 14:29, Joseph Heenan via Openid-specs-fapi wrote:
>>> Hi all
>>> Here’s an interesting report from the OBIE Trustee on the future of the UK ecosystem:
>>> https://www.openbanking.org.uk/wp-content/uploads/FINAL-Trustee-End-of-Implementation-Roadmap-Report-30-January-2023-Final.pdf <https://www.openbanking.org.uk/wp-content/uploads/FINAL-Trustee-End-of-Implementation-Roadmap-Report-30-January-2023-Final.pdf>
>>
>>   "Unresolved systemic issues
>>
>>    The SWG Interim Report (the Interim Report) identified a substantial
>>    number of ongoing issues with the UK Open Banking system that prevent
>>    firms taking advantage of banks’ read/write APIs in such a way as to
>>    make a significant positive impact on consumers and small businesses.
>>    Many of these pose a threat to the ongoing success of the CMA Order
>>    and are matters that require addressing IMMEDIATELY *"
>>
>> Well, since payments with Open Banking versus Apple Pay/EMV haven't even made it to the agenda, this should hardly come as a surprise.
> 
> The text you quote and your statement are completely unrelated.

Dear Joseph, since you most certainly are not alone having this view, there is no need getting personal...

However, according to OBIE/FAPI (direct and indirect), competing head-to-head with card payments (or Apple) was never a part of the game.

For lots of people who heard about Open Banking, as well as for me as technologist and consumer, this does not make sense, and particularly not in the long run.

But it doesn't stop there.  Unlike OBIE/FAPI, the VISA/MasterCard oligopoly managed getting direct client platform support in their latest payment authorization standard (SPC).  If this pans out, it could (together with standard WebAuthn for AIS), eventually eliminate the reliance on the proprietary "app" solutions used by the CMA9 banks.  That is, finally providing a unified UX and *certified* security solution.  Unfortunately, this widens the gap between card payments and A2A transactions since SPC doesn't fit the latter.

In addition, the EU have recently launched a pretty well-funded identity wallet project.  According to the inner circle (transparency has gone out of fashion?), payments is the #1 target.

Note: none of this invalidate the fine job performed by OpenId/FAPI.  I'm simply reiterating the need to look at payments as an area with special needs.  To succeed you may need to deal with information for non-experts as well.  Trivial stuff like selecting bank is still anything but standard.

Kind regards,
Anders

> 
> Joseph
> 
> _______________________________________________
> Openid-specs-fapi mailing list
> Openid-specs-fapi at lists.openid.net
> https://lists.openid.net/mailman/listinfo/openid-specs-fapi