ofOpen Finance Guide
GlossarySTETPSD3 and PSRBlogContact

Blog

Technical articles on Open Banking, PSD2 and API architecture.

security·12 min·August 24, 2026

QWAC vs QSealC: who does what, and why you've got the wrong layer

The QWAC is read by the TLS layer, once, at the handshake. The QSealC is read by the application layer, on every request. Where each private key lives, what STET requires, and how to read a 'certificate error'.

#dsp2#psd2#open-banking#security#eidas#mtls#stet
technical·9 min·April 7, 2026

Technical architecture of a PSD2 API: what to know before writing the first line of code

A technical overview of PSD2 for CTOs, developers and technical PMs: API standards, security (mTLS, eIDAS certificates), OAuth2, SCA flows, consent management, implementation pitfalls.

#dsp2#psd2#open-banking#architecture#api#technical
regulation·7 min·April 6, 2026

Understanding PSD2: what it changes for your customers and your business

Everything an executive, a product manager or a business team needs to understand about PSD2. Players, consent, opportunities, without technical jargon.

#dsp2#psd2#open-banking#regulation#business
ofOpen Finance Guide
From spec to implementation.

Specifications, glossary and PSR tracking for open banking.

Navigation
  • Glossary
  • STET
  • PSD3 and PSR
  • PSR obligations
  • Blog
  • Contact
Legal
  • Legal notice
  • Privacy policy
  • Cookie policy

© 2026 Open Finance Guide.

Maintained by Tancrède Simonin · Content licensed under CC BY-SA 4.0.