Re: [webpayments] Security and Privacy Self-Review (#61)

Review our charter language: "A payment process defined by this group should not disclose private details of the participants' identity or other sensitive information unless required for operational purposes, by legal or jurisdictional rules, or when deliberately consented to (e.g. as part of a loyalty program) by the owner of the information. The design of any API should guard against the unwanted leakage of such data through exploitation of the API."

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/webpayments/issues/61#issuecomment-184740320