@cyberphone, thanks! > This is a very common arrangement. I'd like to hear more. Can you provide me some links to further reading? Who provides this arrangement? First question that comes to mind, why not just encrypt `PaymentResponse.toJSON()` with the three things above? If they need to be passed into the API, presumedly the client site can just do this using the Web Crypto API? (I have no idea what I'm talking about, btw... but that's just my initial reaction) -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/w3c/payment-method-basic-card/issues/38#issuecomment-319577560
Received on Wednesday, 2 August 2017 06:11:57 UTC