Anders, Web service is the latest hype and can hardly called mainstream technology. SOAP, the foundation web service, is not even complete, particularly in respect to security. Yet you are proposing it be used to replace 3D-Secure which is being deployed around the world as we speak. I find this to be of disservice to merchants, banks, and customers.
3D-Secure can support single sign-on (SSO) and one-time PAN with little or no change to the protocol. With minimal change, 3D-Secure can operate without a central directory service and without resorting to asking the user to type in 'AnyBank.com'. 3D-Secure can also use web services when they do become mainstream (it is already using XML and HTTP). Best, Don Park Docuverse
