[w3c/payment-handler] Need normative text for checking the origin of the SW scope against "supported_origins". (#309)

>From [TAG review](https://github.com/w3ctag/design-reviews/issues/231#issuecomment-377645336):

> [8.5 Supported Origin](https://w3c.github.io/payment-handler/#supported-origin) should link to the normative text that it refers to.

Comparing the origin of a service worker registration scope to the `"supported_origins"` list in a payment method manifest sounds like an algorithm. It should be defined in a normative section and references from the security section ([8.5](https://w3c.github.io/payment-handler/#supported-origin)).

cc @dbaron

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/issues/309