EMV® 3-D Secure Browser Flow iframe Requirements and Best Practices v0.1 – Disposition of Comments

Draft Specification & Bulletin Industry Feedback Form Company Name: Primary Contact Name: Working Group or Task Force: 3-D Secure Working Group Document: EMV 3-D Secure Browser Flow iframe Requirements and Best Practices DRAFT 0.1 Date: February 2021 EA/Sub1 Clause No./ Subclause No. /Annex) Paragraph/ Figure/Tabl e/Note Type of comment2 Comment (justification for change) Proposed change EA

ed Third bullet point in the ‘Secure CSP Remove the verb ‘trust’, such that the Guidelines’ section reads "Set a CSP sentence reads ‘Set a CSP which lists which trust lists trusted sources…". Looks trusted sources…’. like a duplication of the usage of both ‘trust’ and ‘trusted’? EA

ed The example for the 3DS Method iframe Remove the ‘style=’ part in contains a duplicated style attribute. ‘style=sandbox="allow-forms …"’. Status (Accept, Reject, In progress) EMVCo Use Only EMVCo observations on each comment submitted Accept Update will be included in the final version of the specification. Accept Update will be included in the final version of the specification. 1 EA/Sub = EMVCo Associate or Subscriber company (enter a 2-3 letter abbreviation for commenting) 2 Type of comment: ge = general te = technical ed = editorial – For technical comments, please indicate whether your comment is a MAJOR or MINOR technical comment. Completed form should be forwarded to the appropriate Working Group or Task Force. Click on: http://www.emvco.com/subscriber/QueryAdd.aspx to submit feedback. 26-Feb-2021

of 1