Re: [w3c/webpayments-payment-apps-api] Payment app identifier to manifest filename mapping (#48)

@adamroach the security concern is, who provides the icon and label?

If I have never installed a payment app from my bank and then I see their name and logo appear under an origin that is similar (but not the same) as theirs I am very likely to select that app and run through the registration process which may include providing all my online banking login details.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/webpayments-payment-apps-api/issues/48#issuecomment-274351364

Received on Sunday, 22 January 2017 19:07:16 UTC