Re: [w3c/payment-handler] Permission model (#363)

The payment handler polyfill we wrote long ago (no longer maintained) required websites to ask for permission to handle payments before they were permitted to store any payment instruments -- precisely because of this. We've done something similar with our credential handler polyfill (for the Credential Handler API in another space). So +1 for requiring websites to request permission first -- or some other clever mechanism for addressing this problem.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/issues/363#issuecomment-592036583