Comments on: Best pay http://tomorrowstransactions.com/2011/07/best-pay/ Thought leadership from Consult Hyperion Thu, 27 Feb 2014 22:21:56 +0000 hourly 1 http://wordpress.org/?v=3.8.1 By: Mike Hendryhttp://tomorrowstransactions.com/2011/07/best-pay/#comment-508 Tue, 19 Jul 2011 02:14:01 +0000 http://ec2-54-201-142-57.us-west-2.compute.amazonaws.com/2011/07/best-pay/#comment-508 Thanks, Dave – I have pointed out many times that the cost of PCI greatly exceeds the cost of EMV; some of these costs represent good practice but the expensive bits are the bits that would be unnecessary with EMV. If the card numbers and expiry dates that PCI is protecting are really secrets, then banks are criminally negligent in printing them on cards, statements etc.

The retail arms of banks long ago decided that account numbers are public information but authentication data must be fiercely protected – this is the correct answer.

Mike

]]>