Re: [Taler] "one click"

[Adrian Hope-Bailie]

Sounds like a miscommunication to me

On 6 October 2016 at 10:06, Anders Rundgren <address@hidden> wrote:

On 2016-10-03 23:41, Jeffrey Burdges wrote:

I noticed this NYT article that couched the Payment WG's spec as being
about "one click" :
http://www.nytimes.com/2016/09/26/business/dealbook/what-if-one-click-buying-were-internetwide.html?_r=0

It's not actually possible to do one click shopping on a merchant's site
securely.  You need interactions with the payment mediator and payment
app.

There are other noteworthy stuff in the article as well:

 "On the security side, rather than sending along all the credit card details,
  the browser will generate a one-time payment token that will avoid leaving
  your credit card number in countless databases around the world"

The _browser_ performs tokenization?

Anders

Interestingly, there is actually a way to do one click shopping though
if you move the buy button off the merchant's site entirely and into the
browser itself.  If a merchant sends a contract, then you display the
payment mediator, shipping address information, and payment app in an
overlay window separate from the merchant controlled window.  This
contains a buy button, so the user can verify information like shipping
visually, and push buy without necessarily changing anything.

Just though that was funny,
Jeff