Re: [w3c/webpayments-payment-apps-api] Payment apps and methods, are they the same? (#35)

> Unfortunately a lot of the web is built assuming ~username is a boundary, so we added the scoping restrictions.

I think I am still misunderstanding. because it seems like the entity controlling Bob's restrictions is Bob himself. He sets the ` Service-Worker-Allowed` header when the browser fetches his sw so he can decide that he will give himself access to `~alice`.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/webpayments-payment-apps-api/issues/35#issuecomment-247060038