NODE f58dfc2dSchneier on SET
"David Honig" <honig@otc.net>Sun, 8 Mar 1998 10:44:19 -0800 (PST)
from Internet World, 2 Mar 98, "Reply to All" (reader feedback)
Credit card transactions over the Net are new, but
not overly different.
We know how to do credit card transactions where there
is no physical card: over the pohne. And we know how to
establish a secure merchant-customer session: via SSL.
SET is a complicated, server-intensive protocol, and I have trouble
believing
its possible to implement a two-inch-thick standard without security bugs.
I'm not surprised merchants are so slow in acepting it. Why bother?
[signed by Bruce Schneier]