![]() |
Originally Posted by Silver Fox
(Post 24404980)
Just to add to that, all of the UK supports chip and pin and it is mostly online. Offline is rare and will depend on, for example, a floor limit, or because the chip has told it to go online. Since 14/2/2016 (2/14/2016 in your currency) it was a requirement to use chip and pin with very few exceptions and the stick for that was that if it was signed for then the retailer was likely to have to pick up the cost of any fraudulent transaction. In fact, I cannot recall having to sign for anything for many a year now. I think it is quaint that I am asked to sign in the US. It's like a blast from the past.
|
Originally Posted by Silver Fox
(Post 24404980)
Just to add to that, all of the UK supports chip and pin and it is mostly online. Offline is rare and will depend on, for example, a floor limit, or because the chip has told it to go online. Since 14/2/2016 (2/14/2016 in your currency) it was a requirement to use chip and pin with very few exceptions and the stick for that was that if it was signed for then the retailer was likely to have to pick up the cost of any fraudulent transaction. In fact, I cannot recall having to sign for anything for many a year now. I think it is quaint that I am asked to sign in the US. It's like a blast from the past.
|
Originally Posted by AllieKat
(Post 24405043)
You're confusing online authorisation with online PIN. In the UK, transactions are authorised online but the PIN is almost always verified offline.
|
Originally Posted by Silver Fox
(Post 24405881)
I am not confused about anything. I was talking about online authorisation when the chip and pin is placed into a terminal handed to me by a merchant where a PIN is used and not a signature.
P.S. to clarify in case we need to take a step back - authentication proves WHO you are, authorisation determines WHAT is allowed. The authorisation step happens online in the UK, but the authentication step happens offline with a PIN stored on the card. Many terminals in the UK are not programmed for online authentication, so when they receive a card that asks to verify the PIN online, they fall back to signature. The same seems to be happening in the US, at least by one popular acquirer. |
Originally Posted by AllieKat
(Post 24406178)
The UK uses offline authentication.
And you're confusing the card authentication with the cardholder verification. :) |
Originally Posted by Lyolik
(Post 24406284)
Why to use the offline authentication with the online authorization (except CDA as the anti MITM-attack method)?
|
Originally Posted by AllieKat
(Post 24406303)
And because offline PIN is faster than online.
|
Originally Posted by Lyolik
(Post 24406395)
No. Offline PIN is slower than online (especially enciphered) but safer.
|
Originally Posted by Lyolik
(Post 24406395)
No. Offline PIN is slower than online (especially enciphered) but safer.
|
Originally Posted by Lyolik
(Post 24406395)
No. Offline PIN is slower than online (especially enciphered) but safer.
|
Originally Posted by tmiw
(Post 24406558)
Didn't we just have a discussion a while back where people pretty much said that offline PIN is deprecated precisely because of security issues?
|
Originally Posted by AllieKat
(Post 24406178)
Proving that you're very confused. Because you just said authorisation. Which is correct. The UK uses online authorisation. But nobody in this thread was talking about authorisation. We were talking about authentication. The UK uses offline authentication.
P.S. to clarify in case we need to take a step back - authentication proves WHO you are, authorisation determines WHAT is allowed. The authorisation step happens online in the UK, but the authentication step happens offline with a PIN stored on the card. Many terminals in the UK are not programmed for online authentication, so when they receive a card that asks to verify the PIN online, they fall back to signature. The same seems to be happening in the US, at least by one popular acquirer. |
Originally Posted by Points Scrounger
(Post 24406965)
Are you implying kiosks, or do you mean that there are offline "staffed" POS as well? I ask as I have a card that is online sig, with an offline PIN (for kiosks, presumably).
Kiosks are the same, offline authorisation transactions only really occur on trains and via contactless in the UK. A card that supports offline pin isn't necessary in the UK though as I've never encountered an automated machine that wouldn't take a C&S card, it'll just go through with no verification. (This will because of our strict disability laws). |
Originally Posted by AllieKat
(Post 24406178)
Proving that you're very confused. Because you just said authorisation. Which is correct. The UK uses online authorisation. But nobody in this thread was talking about authorisation. We were talking about authentication. The UK uses offline authentication.
P.S. to clarify in case we need to take a step back - authentication proves WHO you are, authorisation determines WHAT is allowed. The authorisation step happens online in the UK, but the authentication step happens offline with a PIN stored on the card. Many terminals in the UK are not programmed for online authentication, so when they receive a card that asks to verify the PIN online, they fall back to signature. The same seems to be happening in the US, at least by one popular acquirer. |
Originally Posted by Silver Fox
(Post 24407463)
No, really, not confused. Perhaps lacking a little clarity I agree. The point of Majuki was "Does this mean that Australian cardholders would still be prompted for a signature in the UK most of the time?". What I should have added was that my chip and PIN on a UK bank card worked in Oz, so he/she might have a similar experience in the UK that their Oz card works here. But forgot to add that. Happy to clear that up. Carry on, it's a riveting read. :)
|
| All times are GMT -6. The time now is 9:05 am. |
This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.