Re: [w3c/payment-handler] Basic-credit security issue (#379)

hi @rsolomakhin,

It is a good idea, but the problem is, that we want to give user possibilities to pay with credit card.
So, we have only two options:
1. Leave in payment request just Google pay (for ex), in order to use JIT approach
2. Create a Payment App which will allow paying with credit card.

Disadvantages of first approach are understandable - we will be able to use just Google Pay, but no other Payment Apps as Samsung, or Apple Pay, or custom Payment Apps.
With the second approach is not so clear how to retrieve credit cards which is stored in Google Chrome for ex.

Questions:
1. Is there any way to allow usage of JIT approach not for case when we have only one Payment App but for case when we have more than one?
2. Is it possible to extract saved Chrome credit cards in custom Payment App?

Best,
Roman.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/issues/379#issuecomment-740660579