10.16.18 Your morning briefing
The information you need to start your day, from PaymentsSource and around the Web:
Microsoft sunsets older security
Microsoft plans to disable Transport Layer Security (TLS) 1.0 and 1.1 by default in its web browsers in the first half of 2020, removing older versions of a protocol used for payment encryption.
Apple, Google and Mozilla have made similar announcements, Microsoft notes in a blog post. TLS 1.0 has been around for nearly 20 years, and the latest version, 1.3, will be supported in future editions of the Microsoft Edge browser.
Merchants that still used the older versions of TLS may be held back by their technology; while smaller merchants may simply need to download a new file to a vendor's POS device, it could be a sizeable and expensive upgrade for larger merchants with more complex systems running on outdated operating systems.
Norway's digital wallet in development
Norwegian bank-based payments consortium Vipps is working with Gemalto to create a digital wallet for retailers, private-label payment card issuers and domestic payment schemes leveraging in-app and proximity payments via QR codes and NFC.
Gemalto will provide software, biometrics and encryption for the cloud-based digital wallet which Vipps hopes to expand beyond the Nordic region. Vipps merged with BankAxcept and BankID late last year.
“As a partner to Gemalto, we have secured a global position within the very competitive secure digital payment market, an area that will experience enormous growth over the next few years,” said Bjørn Skjelbred, Vipps’ head of international business development, in a press release.
Face the TSA
Biometric facial recognition isn't just about unlocking iPhones and making payments; the Transportation Security Administration wants to make it a part of airport security, Engadget reports.
The technology will first be used for international travelers, then for TSA Precheck enrollees; finally, it would be offered on an opt-in basis to other passengers, the article states.
A fingerprint version of this system is being tested in Atlanta's Hartsfield-Jackson airport, with Delta planning to add facial recognition this month. Engadget notes that this plan does little to address privacy concerns or false positives.
Denver-based QRails, which provides mobile payment and processing technology for event venues, has expanded its solution to a third soccer club stadium in the U.K. East Midlands-based Peterborough United will use QRails for real-time payments, stadium access and a loyalty program for season ticket holders, QRails announced. The Mastercard-branded solution links to the soccer club’s existing loyalty program and provides support for Apple Pay and Google Pay, according to QRails.
QRails provides similar mobile payments technology for West London’s Queen Park Rangers and Wiltshire-based Swindon Town.
From the Web
U.S. Credit Card Giants Flout India’s New Law on Personal Data
The New York Times | Mon October 15, 2018 - When the clock struck midnight in Delhi at the end of Monday, Visa, Mastercard and American Express were suddenly in violation of the law every time an Indian swiped a credit or debit card.
Tap-and-go cards overtake chip and PIN in shops for the first time
The Telegraph | Mon October 15, 2018 - Shoppers using chip and PIN cards in shops have been eclipsed by those paying by tap-and-go technology for the first time, data shows. Until now chip-and PIN cards have been the most common way to pay in stores but now time-saving contactless technology has taken over.
Insurer Anthem will pay record $16M for massive data breach
ABC News | Mon October 15, 2018 - The nation's second-largest health insurer has agreed to pay the government a record $16 million to settle potential privacy violations in the biggest known health care hack in U.S. history, officials said Monday.
More from PaymentsSource
As EMV looms for gas stations, Shell uses mobile to smooth the transition
Shell has launched a new mobile app called Pay & Save, designed as a frictionless complement to the EMV-chip cards it must accept at its pumps by late 2020.
Low-code regtech complements machine learning for know-your-customer
As silos complicate know your customer compliance and onboarding, low-code technology can provide a boost, according to Reetu Khosla, global head of life-cycle management and KYC for Pegasystems.
Amex, Ethoca add 'Eliminator' to diffuse chargebacks
In providing merchants real-time information when American Express cardholders call its customer service to dispute charges, Amex and Ethoca hope to reduce time and money spent handling chargeback disputes.
Merchants can use PSD2-powered loyalty to lure consumers from rivals
Allowing third-party access to bank data will open up the opportunity for far wider data aggregation than previously possible, writes Huw Davies, CCO of Token.