Re: [w3c/payment-handler] User consent and permissions (#239)

@rsolomakhin,

When we have spoken previously about public usage, several comments have been made:

 1. The user needs to be able to clear data manually; we are talking about this in issue 236.
 2. The user needs to be able to explicitly say "Don't save this payment data for future use" when
    entering data [into the sheet]. 
 3. The owner of the public computer should also be able to configure the browser 
    so that payment data is not stored (whether the user checks a box or not).

We should think about each of those cases explicitly.

Some notes:

 * If the user logs out of bobpay.com, clear all the instrument data from bobpay.com.
 * Clear instrument data after show() or abort(). Or prompt the user to see whether
   they want to keep data for subsequent transactions.

Going to my next call...more later :)

Ian
    

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/issues/239#issuecomment-348987397