Re: [w3c/payment-handler] Security consideration: more awareness about cross-origin sharing (#366)

@danyao commented on this pull request.



> @@ -2445,6 +2445,22 @@ <h2>
           </li>
         </ul>
       </section>
+      <section>
+        <h2>
+          User Awareness about Sharing Data Cross-Origin
+        </h2>
+        <ul>
+          <li>By design, a payment handler from one origin shares data with
+          another origin (e.g., the merchant site).
+          </li>
+          <li>It is important that user agents make clear to users the origin
+          of a payment handler.
+          </li>
+          <li>User agents should help users understand that they are sharing

For the last point, maybe also suggest that user agents should help users understand what data they are sharing across origin?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/pull/366#discussion_r409870252