alt Hacker NewsCards have supported strong, positive cardholder authentication at the POS (chip and PIN) and online (3DS) since the 90s.
It’s entirely the US credit card industry and its regulating bodies’ fault that it has made neither mandatory in the way that e.g. the EU did, and is in fact fighting any attempt to do so tooth and nail (please think of the conversion rate!!)
Can you guys still write a check at the supermarket checkout? No pin credit cards are small potatoes next to personal checks in terms of weirdness. But I wish we had that trust culture everywhere.