Hello,
Does the CyberSource Payment module handle 3D Secure.
If not, can I interest someone in a Bounty.
Kind regards
Paul
MasterCard SecureCode / Verified by Visa / 3D Secure
|
|
Hey Paul, I wrote the module and don't know that I even knew of 3D Secure at the time. If you've got a link to some docs and a general idea of the implementation, you can send me a PM and we can talk about the bounty.
Hi Ryan, 3D secure way is just verifying the card with a password on cards issuer web site. I am trying also to use this way. The flow is like this,
- customer enters the card information on store web page.
- store redirects card information to a gateways web page (like paypal).
- gateway web page redirects the customer to card issuer bank web page.
- issuer bank asks the pin from customer.
- the result is redirected to gateway web page (like paypal)
- gateway page redirects the result to store web page.
With this process the card is verified that the card is used by the holder. And in this case the issuer bank creates a 3Dcertificate and attaches to the process. After that;
- Store web page request an authorization with the 3Dcertificate for bank.
So we need something like getting the card information on checkout page like normal "credit card", but on reviewing order the request should send to gateways web page like the process in "Credit card on a secure server".
Is there a sipmle way to build this flow ?
Oooh... I doubt it. Moving around between websites during checkout can be complicated, especially if we're looking at a different system depending on the card type and gateway. If someone else comes up w/ a unified way of getting this done based on the current credit card module, I'd consider it for core. At the moment, I don't know what it would take.
Just for the record, One of my favorite online stores (www.tigerdirect.com) started supporting this feature about a year ago. As a customer, I hate the damn thing. tigerdirect would not complete my order until I have given Master card my password. The only problem is that I don't know my password since I never set one with Master card. Maybe they have sent me one in a statement or something. It was extremely frustrating. It caused me to quit purchasing from their store. Now I either call them on the phone, or checkout online with one of their competitors. Maybe the system is improved, or we can implement SecureCode better on Ubercart, but I just thought you should see it from a customers perspective.
Peace,
Andy
I couldn't agree more, it is a total pain from the customers point of view.
However, to my knowlage SecureCode is required for all online Maestro card transactions as of July 07.
Certainly CyberSource are requiring e-commerce sites to handle SecureCode Payer Authentication checks.
It looks as though MasterCard and Visa will also require this in the future.
I am still offering a bounty to anyone who can implement this.
I would imagine every Ubercart user who wishes to use CyberSource would need this, unless the SOAP integration gets to a point where it can handle SecureCode?
Please contact me if you are interested in a bounty to complete this.
I really need to accept Maestro!
Hello,
I still would like to hear from any developers able to work on this.
Technical document can be found here:
http://apps.cybersource.com/library/documentation/dev_guides/Payer_Authe...
Paul
We would also like to know more information on this as we were just contacted by Sec Pay regarding the switch, any updates would be great.
Thanks,
Toby
We'd like to see this for the payflow pro modules as well, would be happy to chip into a bounty.
Austrian MPay24 also requires that annoying secured-by-mastercard and verified-by-visa site-kidnapping thing.
I've developed a completely custom PHP system for 3D using Protx/Omnipay/Lloyds and to be frank it's not the simplest of systems and, as others have noted, customers don't particularly like it and our sales have since plummeted... The worst bit is the communication between the banks, the payment providers and the merchant number providers. After my experience they don't quite seem to have their act together... Unfortunately, I think one day before too long it *will* be mandatory for all cards so I guess we're going to have to get used to it!
I would potentially be interested in converting my code to Ubercart at some point, but at the moment I am up to my neck on another ecommerce project so not sure when it could happen. I'll subscribe to this thread to keep up with the conversation and help where/when I can.
Regards,
- Paul
|
|
Joined: 10/23/2007