zlacker

[parent] [thread] 1 comments
1. dzikim+(OP)[view] [source] 2025-04-14 14:00:40
On technical level - nothing. Thing is, that payment card is basically private key, that's derived from master key controlled by the bank. This key signs your transactions. Tokenization adds some extra steps (eg. single use keys), but it's fundamentally the same.

What it means - you cannot obtain working card profile if bank doesn't issue it to you. Therefore you need blessing from bank & card scheme to be connected to this ecosystem.

If you want to go deeper into this rabbit hole I can recommend two sources:

* https://developer.mastercard.com/product/mdes - Mastercards framework for tokenization

* https://developer.verestro.com/books/token-requestor - actual solution. It focuses on offering for single issuer, because market for Google Pay competition is pretty narrow, but technically it's mostly the same + way more red tape.

If you ever decide to try - ping me, I happen to know a few guys there :-)

replies(1): >>codeth+QW6
2. codeth+QW6[view] [source] 2025-04-16 17:29:57
>>dzikim+(OP)
Thank you so much! That's very enlightening!

> If you ever decide to try - ping me, I happen to know a few guys there :-)

Ha, I have actually been entertaining that idea for quite some time, but it seems rather difficult to penetrate that domain as an outsider. The links you shared only seem to confirm that. :-\ I'm not sure I would even want to compete with the Google/Apple Pay duopoly, for now I'd mostly just be interested in an open-source, privacy-preserving solution for contactless payments.

Anyway, you might want to add your contact info to your HN profile – just in case. ;-)

[go to top]