> To be clear: there is nothing in the PMI spec that says how a manifest is fetched. That's defined by a different spec. There is still an open proposal to merge the two specs. > Mozilla has currently no plans to implement Payment Manifest - but Payment Request is still usable. That creates some security risks that I don't think have been talked through. The role of the manifest is to allow the developer of a new payment method to limit which origins can deploy payment handlers for that method. If you don't implement manifest then how will you provide this functionality? -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/w3c/browser-payment-api/issues/521#issuecomment-300142015
Received on Tuesday, 9 May 2017 12:01:40 UTC