Re: [w3c/browser-payment-api] Remove 2119 language from privacy section. (#511)

adrianba commented on this pull request.



> @@ -2690,8 +2689,10 @@
           Exposing user information
         </h2>
         <p>
-          The <a>user agent</a> MUST NOT share information about the user to
-          the web page (such as the shipping address) without user consent.
+          A page might try to call the payment request API to retrieve
+          information about the user. Information about the user (such as the
+          shipping address) should only be shared with the web page with user

I think it's crazy to try to make this say should without using the word should and this is a pretty important recommendation that has come up over and over in the group discussion but be my guest if you want to update this with something else.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/browser-payment-api/pull/511#discussion_r113599118