Re: [w3c/payment-handler] CanMakePaymentEvent handling algorithm unclear (#330)

Thanks for raising the private browsing mode point. Maybe there is a problem. If a website has control of a payment handler, then it can detect whether user is in private browsing mode by calling hasEnrolledInstrument and checking if the result if false.

Can payment handlers be installed silently without user action? I feel this is the worst case because user may not know they are tracked this way.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/issues/330#issuecomment-456893598