Re: [w3c/webpayments-payment-apps-api] Should origin information (about the payment request) be shared with the payment app? (#27)

I've likely missed some relevant conversations, but the payment app learning the recipient sounds fine in principle.  It should not learn this until the users picks it thought the payment mediator of course. 

There might be interesting payment apps where controlling this information could be a selling point, but mostly that sounds like BitCoin or Zerocoin space stuff, like maybe your private keys remain air gapped or something. 

It's generally false however that users should trust their payment app, especially if it's web based.  There are obviously going to be malicious web based payment apps that trick the user into installing them for various nefarious purposes. 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/webpayments-payment-apps-api/issues/27#issuecomment-240583810