HSBC Secure Code

[Mike Hughes]

All SSL (shared or otherwise) does is encrypt all the data between the browser and the server so that it can't be seen by any third party.

SecureCode requires communication with the banks directly to enable the challenge/response protocol and this is something that securing a page with SSL doesn't impact.

As I said earlier. Under the new rules from 1st July you will not be allowed to capture Maestro card details for later processing (for online sales). It doesn't matter whether you have SSL or not.

Mike

[TraceyHand]

Under the new rules from 1st July you will not be allowed to capture Maestro card details for later processing (for online sales). It doesn't matter whether you have SSL or not.

Not even to process it as a MOTO/CNP transaction?


(Not disagreeing, btw, just wasn't aware of this fact)

[TraceyHand]

ok...have been looking into this..

Am I right in thinking it's only INTERNATIONAL issued Maestro that can not be processed as a MOTO transaction? Everything I'm reading seems to suggest that taking UK issued Maestro cards in this way will still be acceptable

Happy to be corrected, of course.

INTERESTING READING
Written for Protx customers but puts it in fairly plain English

[Mike Hughes]

I've done my best to be specific on this.

1. You're not 'ALLOWED' to do this. I didn't say it can't be done.

2. It only applies to online sales. Any MOTO sales can be processed as before.

How you apply these rules, is of course up to the individual.

Mike

[TraceyHand]

yeh, I see what you mean ( I wasn't challenging you or anything )

But it does seem that you CAN'T process international maestro cards as anything OTHER than 3D secure. ie placed by the cardholder on your website and so NOT as any form of MOTO transaction either.

Is that how it reads to you?
It's bloody confusing, for sure!

[Mike Hughes]

I agree it's a bit of a mess.

I wasn't taking the hump or anything. I've been trying to walk the fine line between telling people what the rules say, and hinting at ways around them without actually saying it.

People using a PSP should really just make sure that securecode/verified by visa gets turned on.

People who aren't using a PSP should really sign up with one. It's not a big deal and the cost isn't really so much. Their PSP should be able to pre-authorize transactions so there's no real reason not to do this.

Mike

[Ian Clyde]

Hi Peter,
Just to say quickly in answer to your posts earlier, I have used HSBC for quite a while and found them to be OK although perhaps not the cheapest. You can select in Actinic's set-up to 'pre-authorise' payments therefore allowing you to only actually take the payment once you have shipped the goods.

I've never understood why so many people seem to want to capture the data themselves to transact manually later on...just seems like extra work to me...

I'm not an expert on any of this but hope this helps.

[@Peter]

Thanks Ian - useful information.

And also reading the information about International Maestro cards as opposed to UK ones does make things a lot clearer - gives us a bit longer to sort things!