Visa rolls out new payment application security mandates

Mandate could mean "tens of millions of dollars" in upgrades

[jwolthuis]

According to the article [computerworld.com.au], Visa quietly rolled out a new set of PABP mandates last month, giving Internet eTailers until July 1st, 2008 to begin using PABP-compliant software.

How is the average eCommerce retailer, already in a battle with eBay and other merchants operating on razor-thin margins, supposed to pay for these PABP certifications, scheduled to take effect in less than 8 months? Will Visa shut us down on July 1st?

Does this spell the end to the small Internet retailer?

[vincevincevince]

The small internet retailer is either already with a bank or service which handles those parts of the transaction, or will move to one. I don't think this will be a major problem for most, and if it does force some people to use third-party services it will probably make things both safer and more reliable when dealing with small retailers as you don't have to just hope that they are compliant when they're not home grown.

[jsinger]

"At the same time Visa has also been circulating a frequently updated list of vulnerable payment applications with instructions to card-issuing banks to get merchants to stop using such software. "

Where can I find this list?

[jwolthuis]

The title of the list is, "Visa Alerts Members about Payment Applications that Store Prohibited Data".