[paymentrequest] Should the Payment Request API only be available in a secure context? (#29)

The current spec requires that the API be called from a page that is a [secure context](https://w3c.github.io/webappsec-secure-contexts/). This question has been discussed as part of issue #9 and elsewhere. Nobody has suggested that this should not be the case so this issue records the decision. If someone has new information that suggests the decision should be revisited they can re-open this issue.

---
Reply to this email directly or view it on GitHub:
https://github.com/WICG/paymentrequest/issues/29