Agreed that it's not the best solution, but it is what every bank (at least here in the UK, and from the sounds of it, in America too) does.
As to storing the PIN in plaintext, that's not even the bank's decision, a single bank can't decide to go against the entire chip+pin system.
Side question: AFAIK, chip+pin is far less common in America than in UK/Europe, with many people still using magnetic+signiture. Am I out of date, or is this still the case?
I live in the US, and I don't think I've ever seen a chip+pin card.
Most stores will take ATM/debit cards (using PIN) as an alternative to credit cards (using signature), but the ATM/debit cards use magnetic stripe like the credit cards.
Comments
Agreed that it's not the best solution, but it is what every bank (at least here in the UK, and from the sounds of it, in America too) does.
As to storing the PIN in plaintext, that's not even the bank's decision, a single bank can't decide to go against the entire chip+pin system.
Side question: AFAIK, chip+pin is far less common in America than in UK/Europe, with many people still using magnetic+signiture. Am I out of date, or is this still the case?
I live in the US, and I don't think I've ever seen a chip+pin card.
Most stores will take ATM/debit cards (using PIN) as an alternative to credit cards (using signature), but the ATM/debit cards use magnetic stripe like the credit cards.