Re: [w3c/payment-request] Suggested emphasis of privacy protections (#628)

marcoscaceres commented on this pull request.



> @@ -3320,6 +3320,11 @@
           The <a>user agent</a> MUST NOT share information about the user with
           a developer (e.g., the shipping address) without user consent.
         </p>
+        <p>
+          The <a>user agent</a> MUST NOT share sales information beyond the payment

How about:
```
The <a>user agent</a> MUST NOT share the values of the <a>displayItems</a> member or <a>additionalDisplayItems</a> member with a third-party <a>payment handler</a> without user consent.
```

We could go one better, and actually put this requirement inline for each of the above members. 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-request/pull/628#pullrequestreview-63847354