funsec mailing list archives

Visa Relaxes Retail Credit Card Security Threats


From: "Paul Ferguson" <fergdawg () netzero net>
Date: Thu, 16 Aug 2007 17:19:05 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

"We're going to get tough on merchants. Not really."

Via eWeek.

[snip]

For more than a year, Visa has ominously warned large retailers that it
would enforce a strict Sept. 30 deadline for many of the nation's largest
retailers to either be certified that they comply with industry credit card
security requirements or face fines and expulsion from discounted credit
card fee programs.

But as the deadline has gotten closer—and the percentage of retailers
certified as compliant is still quite low—Visa has been forced to back
off, albeit slightly.

In an attempt to boost the number of Level 1 retailers certified compliant
with the PCI DSS (Payment Card Industry Data Security Standard, often
referred to simply as PCI), Visa in December unveiled a series of
incentives to convince retailers into cooperating, given the lack of
success that the threat of fines was having.

A big part of those incentives was offering compliant retailers sharply
discounted credit card transaction fees in a program called the Visa PCI
CAP (Compliance Acceleration Program).

This month, Visa has been quietly floating memos that will soften the pain
for non-compliant retailers, as it's become clear that non-compliants will
have strength in numbers come early October.

[snip]

More:
http://www.eweek.com/article2/0,1759,2171641,00.asp

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)

wj8DBQFGxIcDq1pz9mNUZTMRAkWzAKD3DgM+BhA3NF60wufKMQmb4oFj9gCfV/ta
zH7T/DyJrE4yukh7+JpZ5C0=
=plAT
-----END PGP SIGNATURE-----



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: