Re: [w3ctag/design-reviews] Secure Payment Confirmation (#544)

@cyberphone,

You wrote:  What is an "instrument" in the case of card payments, if not "a card number in clear"? 
 
A card may be represented in a variety of ways, including an opaque identifier provided by a payment service provider and used in card-on-file scenarios. I think the EMVCo PAR may be another option. The main point is that from an SPC perspective it doesn't matter.

In response to "The user selects an instrument to make a payment", you wrote: "What standard is this based on? I know that Chrome can hold card data."

Again, from an SPC perspective it doesn't matter. Some options might be:

* Card on file
* Instrument selection in a JavaScript popup (e.g., some SRC experiences)
* Instrument selection in the Sheet (Chrome implementation of Payment Request)
* Instrument selection in a payment app. (This probably won't work today with SPC, but it's part of the longer-term vision)
* Form-fill

Although instrument display and selection remains a topic of interest to the WPWG, it is not currently part of SPC.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/544#issuecomment-902199279