|
2904 | 2904 | <p>
|
2905 | 2905 | The steps to <dfn>create a <code>PaymentAddresscode> from
|
2906 | 2906 | user-provided inputdfn> are given by the following algorithm. The
|
2907 |
| - algorithm takes a <a>lista> <var>redactListvar>, for which user |
2908 |
| - input will not be gathered. |
| 2907 | + algorithm takes a <a>lista> <var>redactListvar>. |
2909 | 2908 | p>
|
| 2909 | + <div class="note" title= |
| 2910 | + "Privacy of recipient information (the redactList)"> |
| 2911 | + <p> |
| 2912 | + The <var>redactListvar> optionally gives user agents the |
| 2913 | + possibility to limit the amount of personal information about the |
| 2914 | + recipient that the API shares with the merchant. |
| 2915 | + p> |
| 2916 | + <p> |
| 2917 | + For merchants, the resulting <a>PaymentAddressa> object provides |
| 2918 | + enough information to, for example, calculate shipping costs, but, |
| 2919 | + in most cases, not enough information to physically locate and |
| 2920 | + uniquely identify the recipient. |
| 2921 | + p> |
| 2922 | + <p> |
| 2923 | + Unfortunately, even with the <var>redactListvar>, recipient |
| 2924 | + anonymity cannot be assured. This is because in some countries |
| 2925 | + postal codes are so fine-grained that they can uniquely identify a |
| 2926 | + recipient. |
| 2927 | + p> |
| 2928 | + div> |
2910 | 2929 | <ol data-link-for="AddressInit">
|
2911 | 2930 | <li>Let <var>detailsvar> be an <a>AddressInita> dictionary with
|
2912 | 2931 | no members present.
|
|
4319 | 4338 | <a>Queue a taska> on the <a>user interaction task sourcea> to
|
4320 | 4339 | run the following steps:
|
4321 | 4340 | <ol>
|
4322 |
| - <li> |
4323 |
| - <div class="note" title="Privacy of recipient information"> |
4324 |
| - <p> |
4325 |
| - The <var>redactListvar> optionally gives user agents the |
4326 |
| - possibility to limit the amount of personal information |
4327 |
| - about the recipient that the API shares with the merchant. |
4328 |
| - p> |
4329 |
| - <p> |
4330 |
| - For merchants, the resulting <a>PaymentAddressa> object |
4331 |
| - provides enough information to, for example, calculate |
4332 |
| - shipping costs, but, in most cases, not enough information |
4333 |
| - to physically locate and uniquely identify the recipient. |
4334 |
| - p> |
4335 |
| - <p> |
4336 |
| - Unfortunately, even with the <var>redactListvar>, |
4337 |
| - recipient anonymity cannot be assured. This is because in |
4338 |
| - some countries postal codes are so fine-grained that they |
4339 |
| - can uniquely identify a recipient. |
4340 |
| - p> |
4341 |
| - div>Let <var>redactListvar> be the empty list. Optionally, |
4342 |
| - set <var>redactListvar> to « "organization", "phone", |
4343 |
| - "recipient", "addressLine" ». |
| 4341 | + <li>Let <var>redactListvar> be the empty list. Optionally, set |
| 4342 | + <var>redactListvar> to « "organization", "phone", "recipient", |
| 4343 | + "addressLine" ». |
4344 | 4344 | li>
|
4345 | 4345 | <li>Let <var>addressvar> be the result of running the steps to
|
4346 | 4346 | <a>create a <code>PaymentAddresscode> from user-provided
|
|
0 commit comments