Confirmed users
2,959
edits
| Line 74: | Line 74: | ||
* Does the trustworthy UI provide any context of where the HTML 5 content served inside the UI is from? In other words, how do I know the content I've received is safe or not? Is the URL of the content shown in the trustworthy UI to mitigate this? | * Does the trustworthy UI provide any context of where the HTML 5 content served inside the UI is from? In other words, how do I know the content I've received is safe or not? Is the URL of the content shown in the trustworthy UI to mitigate this? | ||
* How come postback and chargeback URLs are specified in the JWT request and Mozilla Marketplace? What's the difference? | * How come postback and chargeback URLs are specified in the JWT request and Mozilla Marketplace? What's the difference? Is the one on marketplace the default callback URLs if a callback URL isn't specified? | ||
* How exactly does the identity pieces affect the in-app payments flow? I've noticed it's stated it's the responsibility of the "payment provider" - from the context of mozPay, is that a black box then? | * How exactly does the identity pieces affect the in-app payments flow? I've noticed it's stated it's the responsibility of the "payment provider" - from the context of mozPay, is that a black box then? | ||