From 8ee251d53b794e3e1eaaac7bb6e9415ee2a58147 Mon Sep 17 00:00:00 2001 From: Ian Jacobs Date: Tue, 26 Jun 2018 17:29:19 -0500 Subject: [PATCH 1/2] Added information about redactList to privacy consideration about not exposing user information, part of https://github.com/w3c/payment-request/issues/675 --- index.html | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/index.html b/index.html index 7f41fc7e..4cecb57e 100644 --- a/index.html +++ b/index.html @@ -4651,6 +4651,14 @@

The user agent MUST NOT share information about the user with a developer (e.g., the shipping address) without user consent.

+

+ One way that the API supports limited information sharing is through + the redactList associated with the + onshippingaddresschange event. This feature enables user + agents to provide the payee with enough information to compute + shipping costs, while limiting the payee's ability to identify the + payer via the address. +

The user agent MUST NOT share the values of the displayItems member or From 75520aa57252c301965675f6a34c0693caec26cb Mon Sep 17 00:00:00 2001 From: Ian Jacobs Date: Thu, 28 Jun 2018 11:26:52 -0500 Subject: [PATCH 2/2] Made more general (per marcos) for billing address in the future --- index.html | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/index.html b/index.html index 4cecb57e..ee23195f 100644 --- a/index.html +++ b/index.html @@ -4653,11 +4653,11 @@

One way that the API supports limited information sharing is through - the redactList associated with the - onshippingaddresschange event. This feature enables user - agents to provide the payee with enough information to compute - shipping costs, while limiting the payee's ability to identify the - payer via the address. + the redactList associated with the creation of physical + addresses throughout the API. This feature enables user agents to + provide the payee with enough information to compute shipping costs + or tax information, while limiting the payee's ability to identify + the payer via the address.

The user agent MUST NOT share the values of the