From bc0fd8bb1d4cf8d543d11eaa087f05ca2d00d8f2 Mon Sep 17 00:00:00 2001
From: Ian Jacobs <ij@w3.org>
Date: Tue, 26 Jun 2018 17:26:18 -0500
Subject: [PATCH] Added canMakePayment() section to privacy considerations,
 part of 675 https://github.com/w3c/payment-request/issues/675

---
 index.html | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/index.html b/index.html
index 176a2f5e..6171805c 100644
--- a/index.html
+++ b/index.html
@@ -4778,6 +4778,19 @@ <h2>
           consent.
         </p>
       </section>
+      <section>
+        <h2>
+          canMakePayment() protections
+        </h2>
+        <p data-link-for="PaymentRequest">
+          The <a>canMakePayment()</a> method enables the payee to call
+          <a>show()</a> if the user is ready to take advantage of the API, or
+          to fall back to a legacy checkout experience if not. Because this
+          method shares some information with the payee, user agents are
+          expected to protect the user from abuse of the method, for example,
+          by restricting the number or frequency of calls.
+        </p>
+      </section>
     </section>
     <section id="dependencies">
       <h2>