[Openid-specs-ab] Fwd: [blink-dev] Intent to Prototype: Secure payment confirmation

Tom Jones thomasclinganjones at gmail.com
Fri Jul 31 14:51:23 UTC 2020


Follow up on George s email. Here are how that will impact the browser,
probably excluding Apple.

thx ..Tom (mobile)

---------- Forwarded message ---------
From: Nick Burris <nburris at chromium.org>
Date: Thu, Jul 30, 2020, 8:51 AM
Subject: [blink-dev] Intent to Prototype: Secure payment confirmation
To: blink-dev <blink-dev at chromium.org>
Cc: Rouslan Solomakhin <rouslan at chromium.org>, Danyao Wang <
danyao at chromium.org>


Contact emails rouslan at chromium.org, nburris at chromium.org,
danyao at chromium.org Explainer
https://github.com/rsolomakhin/secure-payment-confirmation Design docs/spec
https://bit.ly/secure-payment-confirmation TAG review Summary Secure
payment confirmation augments the payment authentication experience on the
web with the help of WebAuthn. The feature adds a new PaymentCredential
credential type to the Credential Management spec, which allows a relying
party such as a bank to create a PublicKeyCredential that can be queried by
any merchant origin as part of an online checkout via the Payment Request
API using the proposed secure-payment-confirmation payment method.
Motivation This feature enables a consistent, low friction, strong
authentication experience using platform authenticators. Strong
authentication with the user's bank is becoming a requirement for online
payments in many regions, including the European Union. The proposed
feature provides better user experience and stronger security than existing
solutions. Risks
Interoperability and Compatibility This feature adds a WebAuthn credential
type and PaymentRequest payment method type, so the interop risk is that
other browsers do not implement these types. The PaymentRequest API allows
developers to specify multiple supported payment methods in case some are
not supported. *Gecko*: Positive signal from informal conversation in W3C
Payment Handler meetings. This feature is part of the Payment Handler API
for which Mozilla recently filed an intent to implement. *WebKit*: No signal

*Web developers*: Positive signals from Stripe, which is interested in
experimenting with the feature.
Will this feature be supported on all six Blink platforms (Windows, Mac,
Linux, Chrome OS, Android, and Android WebView)? No We intend to experiment
with Stripe on Mac to first prove the user benefit, and then extend the
feature to all platforms, except WebView where PaymentRequest is not
supported.
Is this feature fully tested by web-platform-tests
<https://chromium.googlesource.com/chromium/src/+/master/docs/testing/web_platform_tests.md>
? No To be added to the payment-request
<https://wpt.fyi/results/payment-request?label=experimental&label=master&aligned>
suite. Link to entry on the Chrome Platform Status
https://chromestatus.com/feature/5702310124584960
This intent message was generated by Chrome Platform Status
<https://www.chromestatus.com/>.

-- 
You received this message because you are subscribed to the Google Groups
"blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to blink-dev+unsubscribe at chromium.org.
To view this discussion on the web visit
https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CADvKJHPdSHHtH1XhmNLy1DCL2uO-DHVDOUUUutjs_KLJSzShYw%40mail.gmail.com
<https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CADvKJHPdSHHtH1XhmNLy1DCL2uO-DHVDOUUUutjs_KLJSzShYw%40mail.gmail.com?utm_medium=email&utm_source=footer>
.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20200731/6721be00/attachment.html>


More information about the Openid-specs-ab mailing list