Redact dependentLocality from shippingAddress (#846)

* Redact dependentLocality from shippingAddress

* Make redactList mandatory

* Removed dependentLocality, make redactList mandatory

* Clarify the note

Author: marcoscaceres

index.html

@@ -4330,7 +4330,28 @@ 
             <a>Queue a taska> on the <a>user interaction task sourcea> to
             run the following steps:
             <ol>
-              <li>Let <var>redactListvar> be the empty list. Optionally, set
+              <li>
+                <div class="note" title="Privacy of recipient information">
+                  <p>
+                    The <var>redactListvar> limits the amount of personal
+                    information about the recipient that the API shares with
+                    the merchant.
+                  p>
+                  <p>
+                    For merchants, the resulting <a>PaymentAddressa> object
+                    provides enough information to, for example, calculate
+                    shipping costs, but, in most cases, not enough information
+                    to physically locate and uniquely identify the recipient.
+                  p>
+                  <p>
+                    Unfortunately, even with the <var>redactListvar>,
+                    recipient anonymity cannot be assured. This is because in
+                    some countries postal codes are so fine-grained that they
+                    can uniquely identify a recipient.
+                  p>
+                div>
+              li>
+              <li>Let <var>redactListvar> be the empty list. Set
               <var>redactListvar> to « "organization", "phone", "recipient",
               "addressLine" ».
               li>