[w3c/browser-payment-api] How are digital signatures supported for Payment Requests? (#291)

I had a brief chat with @rsolomakhin about digital signature support for the Payment Request API. 

To recap, here's the use case:

The merchant (and the payment app) desire that the payment request is digitally signed so that they may be certain that it has not been tampered with in transit.

There are a number of scenarios where a digital signature on a payment request is desirable:

1. High value transactions (Payment Request for $10,000+ in US).
2. Publishing Payment Requests in HTML via schema.org-like mechanisms (digital offers).
3. Business requirements that require the payer to store information demonstrating that the payee has asked for a specific monetary amount (invoice before payment, audit-ability, etc).

To be clear, this issue isn't requesting that digital signatures are implemented in the Payment Request API. The request is to demonstrate that the Payment Request API is capable of supporting digital signatures in a way that is not onerous to Web developers.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/browser-payment-api/issues/291