Intent to Extend Origin Trial: Secure Payment Confirmation V2

47 views
Skip to first unread message

Nick Burris

unread,
Jul 8, 2021, 5:07:17 PM7/8/21
to blink-dev, Stephen McGruer, Rouslan Solomakhin, Nick Burris, Liquan (Max) Gu

Contact emails

smcg...@chromium.org, rou...@chromium.org, nbu...@chromium.org, ma...@chromium.org


Explainer

https://github.com/rsolomakhin/secure-payment-confirmation


Design docs

https://bit.ly/secure-payment-confirmation


TAG review

https://github.com/w3ctag/design-reviews/issues/544


Summary

We'd like to extend the last active milestone of our origin trial for Secure Payment Confirmation from M93 to M94, due partners not being ready in time for the original M91-M93 timeframe, API changes coming in M94, and we want to enable the trial on the Android platform which has been implemented in M93.


Original feature summary

Secure payment confirmation augments the payment authentication experience on the web with the help of WebAuthn. The feature adds a new PaymentCredential credential type to the Credential Management spec, which allows a relying party such as a bank to create a PublicKeyCredential that can be queried by any merchant origin as part of an online checkout via the Payment Request API using the proposed secure-payment-confirmation payment method.


Link to “Intent to Prototype” blink-dev discussion

Intent to Prototype: https://groups.google.com/a/chromium.org/d/topic/blink-dev/myUR5gyd5Js/discussion

Intent to Experiment:

https://groups.google.com/a/chromium.org/g/blink-dev/c/6Dd00NJ-td8


Risks



Interoperability and Compatibility

This feature adds a WebAuthn credential type and PaymentRequest payment method type, so the interop risk is that other browsers do not implement these types.


Gecko: No signal


WebKit: No signal


Web developers: Positive

Positive signals from Stripe, which is still experimenting with the feature.



Goals for experimentation

This phase of the experiment has enabled us to clean up the API shape, and we are making API changes that we would like to trial into M94 along with the addition of the Android platform.


The original experiment’s goal still stands, to prove the user benefit of the feature, and gather feedback on the API changes, consisting of the PaymentCredential type added to the credentials API, and the secure-payment-confirmation payment method added to the PaymentRequest API.


Experimental timeline

M91-M95 (end exclusive, one milestone extension)


Will this feature be supported on all six Blink platforms (Windows, Mac, Linux, Chrome OS, Android, and Android WebView)?

No

The feature is currently available on Windows and Mac, and with this intent we are also enabling it for Android in M93.


Is this feature fully tested by web-platform-tests?

Yes

https://wpt.fyi/results/secure-payment-confirmation?label=master&label=experimental&aligned


Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5702310124584960

Yoav Weiss

unread,
Jul 9, 2021, 4:11:30 AM7/9/21
to Nick Burris, blink-dev, Stephen McGruer, Rouslan Solomakhin, Liquan (Max) Gu
LGTM to continue experimenting in M94

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CADvKJHM2qN-9LBVLr-d86R7GKv6rjAJRN4GrmxZNtidNehNzUQ%40mail.gmail.com.
Reply all
Reply to author
Forward
0 new messages