Re: [w3c/payment-request] Authentication of merchant domain and details (Issue #1014) from ianbjacobs on 2023-11-16 (public-webpayments-specs@w3.org from November 2023)

From: ianbjacobs <notifications@github.com>
Date: Thu, 16 Nov 2023 11:37:06 -0800
To: w3c/payment-request <payment-request@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <w3c/payment-request/issues/1014/1815191406@github.com>

@mimi89999,

If I understand the scenario, the fraud you describe would be possible with or without using payment request. Is that correct? Or are you indicating that payment request introduces a new attack surface? 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-request/issues/1014#issuecomment-1815191406
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/payment-request/issues/1014/1815191406@github.com>

Received on Thursday, 16 November 2023 19:37:11 UTC