Hacker News new | ask | show | jobs
by TazeTSchnitzel 1873 days ago
Here in Sweden, some major banks already refused to let you do card transactions without SCA/3DS, before PSD2 was even passed. As a result, PSD2 finally being implemented is a welcome relief for me, because those annoying services that would always cause a card decline are now being forced to show a 3DS prompt instead. That prompt is also pretty convenient here because of the wide deployment of Mobile BankID.

(The experience before was: pray this merchant supports 3DS, discover that it doesn't, fish out your phone and open mobile banking, authenticate with mobile banking, find and use the toggle that temporarily allows non-3DS transactions. Now I just bring up the authentication app when prompted.)

3 comments

While I mostly agree with you the fact that BankID does not support (desktop or non-android) linux at all or other secure auth methods like U2F for any platform is sad. If you want to be a modern citizen in sweden today you need to use at least one device with a non-free OS just to access basic services.
There is AB Svenska Pass's eID which any registered resident of Sweden can get (https://skatteverket.se/id-kort) and which supports Linux.

Unfortunately, only Swedish Tax Agency services (including minmyndighetspost.se) seem to support it, which means it's not a realistic alternative.

I think all essential services should be forced to support multiple providers.

Meanwhile, Sweden’s response to PayPal, Klarna, “integrate” with your internet bank by logging in to it and pretending to be you. The authentication prompt you get clearly says “you are logging in to $yourBank” when you do it too.
This is also the result of regulations. Opening up the banks "APIs" to outsiders.
I don’t know payments infrastructure super well, but reading your comment it makes me wonder if what you are talking about is related to the card woes that I had when I lived there in 2018. Not having a Swedish bank account and paying for larger sums with my American credit card would often trigger declines and I would have to contact my card issuer to authorize the payment to go through frequently. I specifically remember having a lot of trouble whenever I would pay a company that used the Swedish company called “DIBS” to authorize my payment.
You were most likely experiencing a problem on the opposite end: the merchant (or their payment processor) rejecting you, rather than your card issuer.