[wbs] response to 'Call for Review: Web Payments Working Group Charter'

The following answers have been successfully submitted to 'Call for Review:
Web Payments Working Group Charter' (Advisory Committee) for Mozilla
Foundation by David Baron.


The reviewer's organization suggests changes to this Charter, and only
supports the proposal if the changes are adopted [Formal Objection].

Additional comments about the proposal:
   §1.2 states that the WG might develop "an encryption module for 
one or more payment methods"; however, WG members do not
necessarily have the expertise to do this work. At the least, it
would be helpful to mention the parties (e.g., Web Cryptography
WG or Web Application Security WG) that will be consulted to
ensure the security of any such encryption module.

§1.3 suggests that work might happen around "the relationship of 
Payment Request API to EMVCo 3D Secure" (and in fact a 3DS Task
Force has been spun up). Our very early impression is that such
work might involve two-factor authentication methods that do not
use a standardized technology such as what's being developed
within the Web Authentication Working Group. If the outcome is 
that browsers need to support both a 3DS method and a Web
Authentication method, we would be concerned about duplication of
effort, architectural confusion, and differential security
profiles.  We'd prefer that these W3C working groups move in the
direction of settling on one method for user identification and
authentication.


The reviewer's organization intends to participate in these groups:
   - Web Payments Working Group

The reviewer's organization:
   - intends to review drafts as they are published and send comments.
   - intends to develop experimental implementations and send experience
reports.
   - intends to develop products based on this work.

Answers to this questionnaire can be set and changed at
https://www.w3.org/2002/09/wbs/33280/wpwg-charter-201712/ until 2018-02-05.

 Regards,

 The Automatic WBS Mailer

Received on Saturday, 3 February 2018 17:09:07 UTC