Securing the invocation of payment agent - Githubissues

w3c / webpayments-ig

Web Payments Interest Group

22 stars 29 forks source link

Securing the invocation of payment agent #19

Open ianbjacobs opened 9 years ago

ianbjacobs commented 9 years ago

Considerations (likely for the architecture document):

Payment agent provider wants to be sure their agent is invoked when the user thinks it is being invoked
Similarly, user wants to be sure the right software is invoked and not some malware.

What are the architectural requirements are necessary so that different parties can provide guarantees?