Re: [w3c/3ds] 3DS 2.0 specificities by schema (#1)

> Can the user navigate to another origin within that window (e.g., via a link)?

Sure, the user can navigate any origin including clicking a link.
But if the origin is out of scope, the SW can not control the window anymore.

> Can the payment handler include content from another origin (e.g., in an iframe)?

The payment handler's window includes an iframe from another origin but the associated SW can not control it.

> Can the payment handler open another window (e.g., for authentication by another origin such as bank.com in [2])?

The payment handler can open any origin's window. But it might not be controlled by the associated SW.

I'm on a trip. So, I couldn't test it actually but I believe the following scenario will be possible.

1. Open payment handler's window (pay.com)
2. Navigate to bank.com
3. Process authentication on bank.com
4. Back to payment handler's origin. Then the window will be controlled by SW again.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/3ds/issues/1#issuecomment-362885280