diff --git a/index.html b/index.html index c7026b67..87b28c08 100644 --- a/index.html +++ b/index.html @@ -181,6 +181,10 @@

  • Allow the user agent to act as intermediary between merchants, users, and payment method providers.
  • +
  • Enable user agents to streamline the user's payment experience by + taking into account user preferences, merchant information, security + considerations, and other factors. +
  • Standardize (to the extent that it makes sense) the communication flow between a merchant, user agent, and payment method provider. @@ -310,9 +314,7 @@

    The PaymentRequest is constructed using the supplied methodData list including any payment method specific data, the payment - details, and the payment options. The - methodData supplied to the PaymentRequest - constructor SHOULD be in the order of preference of the caller. + details, and the payment options.

    @@ -721,10 +723,8 @@

    Otherwise, show a user interface to allow the user to interact with the payment request process, using those payment handlers and payment methods which the above step identified as - feasible. The user agent MAY show payment methods in the order - given by supportedMethods, but SHOULD prioritize the - preference of the user when presenting payment methods and - applications. + feasible. The user agent SHOULD prioritize the preference of the + user when presenting payment methods and applications.

    The payment handler should be sent the appropriate data from @@ -2746,8 +2746,8 @@

    A page might try to call the payment request API repeatedly with only one payment method identifier to try to determine what payment methods a user agent has installed. There may be legitimate - scenarios for calling repeatedly (for example, to control the order - of payment method selection). The fact that a successful match to a + scenarios for calling repeatedly (for example, to control the flow of + payment method selection). The fact that a successful match to a payment method causes a user interface to be displayed mitigates the disclosure risk. Implementations may also require a user action to initiate a payment request or they may choose to rate limit the calls