Sometime the timing is just too perfect.
Yesterday I was trying to book a flight on Brussel Airlines and when I was trying to pay via credit card, they insisted on an on-the-fly enrollment to MasterCard SecureCode. I refused and booked via the AMEX Business Service.
Today a security analysis of the whole scheme was published by British scientists, confirming my reservations.
Money quotes:
“Merchants who use it push liability for fraud back to banks, who in turn push it on to cardholders.”
“So this is yet another case where security economics trumps security engineering, but in a predatory way that leaves cardholders less secure.”