Re: [w3c/browser-payment-api] How are payment apps shared between different browser brands? (#38)

I missed this issue before, but I should point out : 

There is a serious security threat in sharing payment app registrations between different browsers and different profiles of the same browsers because people do manage their web exposure by using different browsers.  It's easy to click too far through common menus and accidentally reveal a shipping address to a site that you want to buy from but must not learn your address. 

Examples : 
- It's not so strange to configure different browsers differently, or use browser profiles, for different sorts of activities, like to isolate Google+, Gmail, etc. from Google Maps.
- Anyone using Tor Browser probably has a normal browsers they use in special contexts. 
- It's reasonable to imagine a family machine separating users using browser profiles instead of system users. 

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/browser-payment-api/issues/38#issuecomment-214041415