Re: [w3c/payment-handler] Security consideration: more awareness about cross-origin sharing (#366)

@ianbjacobs commented on this pull request.



> @@ -2445,6 +2445,22 @@ <h2>
           </li>
         </ul>
       </section>
+      <section>
+        <h2>
+          User Awareness about Sharing Data Cross-Origin
+        </h2>
+        <ul>
+          <li>By design, a payment handler from one origin shares data with
+          another origin (e.g., the merchant site).
+          </li>
+          <li>It is important that user agents make clear to users the origin
+          of a payment handler.
+          </li>
+          <li>User agents should help users understand that they are sharing

Added rationale: to mitigate phishing attacks

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/pull/366#discussion_r409555982