search

w3c / payment-request

Payment Request API
https://www.w3.org/TR/payment-request/
Other
488 stars 135 forks source link

Always requiring CVV? #730

Closed marcoscaceres closed 6 years ago

marcoscaceres commented 6 years ago

Right now, there is no way for a vendor to not ask for CVV? Sometimes it's not required.

Should we do something there?

marcoscaceres commented 6 years ago

(maybe this is a basic card spec problem)

ianbjacobs commented 6 years ago

This is a general issue first raised by @mattsaxon: https://github.com/w3c/payment-request/issues/97

Matt then wrote a proposal: https://github.com/w3c/payment-request/pull/114

At some point it was suggested instead to be able (on a per payment method basis) to specify fields you DO NOT want to get back. The primary use case cited was "I don't want the CVV; I am willing to accept the risk and prefer less friction in the user experience."

Each time we have discussed this, we have decided not to include it.

Ian

marcoscaceres commented 6 years ago

Ah, yeah! thanks for the links.