Secure Payment Confirmation 2021-08-31

[ianbjacobs]

The Privacy IG prefers groups to complete a self-review around the time of FPWD. See https://w3ctag.github.io/security-questionnaire/.

If you still want us to review your spec, please provide the information below.

In the issue title above add the document name followed by the date of this request.

• name of spec to be reviewed: Secure Payment Confirmation
• URL of spec: https://w3c.github.io/secure-payment-confirmation/
• Does your document have an in-line Privacy Considerations section, separate from Security Considerations? If not, correct that before proceeding further.

Yes: https://w3c.github.io/secure-payment-confirmation/#sctn-privacy-considerations

• Do you need a reply by a particular date? No.
• Please point to the results of your own self-review (see https://w3ctag.github.io/security-questionnaire/ , https://w3c.github.io/fingerprinting-guidance/, https://tools.ietf.org/html/rfc6973)

https://github.com/w3c/secure-payment-confirmation/blob/main/security-privacy-questionnaire.md

• Where and how to file issues arising? https://github.com/w3c/secure-payment-confirmation/issues

• Pointer to any explainer for the spec?

https://github.com/w3c/secure-payment-confirmation/blob/main/explainer.md

Other comments:

It would be good to organize a joint discussion during TPAC. Our WG meets 25-28 October. I will follow up with the Chairs.

[sandandsnow]

There was an initial discussion on the PING call on 7 October 2021. This review will be discussed on the PING call on 21 October 2021.

[sandandsnow]

Review discussed on PING call on 21 October 2021

Go to https://github.com/w3cping/tracking-issues/issues to track the progress of any issues raised as a result of the privacy review.

Issue closed as the review has been undertaken.

(Note: there may still be outstanding privacy considerations identified in the review that have not yet been resolved.)