credit card conventional wisdom

[hallam at w3.org]

>The situation now is that in a "card not present" transaction the merchant is
>liable for the fraud.  This means that *a lot* of internet based stores are 
>getting eaten alive by fraud.

This is not quite accurate. In the US there is that distinction, in the UK
the credit card co is responsible. For that reason the requirement that
goods be delivered to the billing address _ONLY_ is strictly enforced.


>[ as an aside I've put two people in jail this year for card fraud ]

Good to hear that!

	Phill