Schneier on SET

["David Honig" <honig@otc.net>]

from Internet World, 2 Mar 98, "Reply to All" (reader feedback)


Credit card transactions over the Net are new, but
not overly different.

We know how to do credit card transactions where there
is no physical card: over the pohne.  And we know how to
establish a secure merchant-customer session: via SSL.
SET is a complicated, server-intensive protocol, and I have trouble
believing
 its possible to implement a two-inch-thick standard without security bugs.
 I'm not surprised merchants are so slow in acepting it.  Why bother?

[signed by Bruce Schneier]