What’s new in EMVLab
I set up EMVLab back in 2009, along with my former colleague, Mike Bond. We set out to provide useful tools for people working in payment systems development and research, and based on feedback from users I think broadly speaking it’s done its job. I’ve kept it up and running, but there have been some features which are now showing their age.
In the past few months I’ve moved the site to a dedicated virtual machine in UCL (resolving some reliability and performance problems), but this also gave me an opportunity to update some other aspects that I’ve long been putting off. This post summarises these updates, as well as some of my future plans.
HTTPS availability
EMVLab is now available over HTTPS, thanks to Let’s Encrypt. At least for now I am not re-directing HTTP to HTTPS or using HTTPS-enforcing measures like HSTS. This is because one of the principles behind EMVLab was that it should require the bare minimum in terms of browser capability. Workstations in some payment systems companies are incredibly locked-down and so features like Javascript might not be available. I don’t know of any specific instances, but I …