> Note that I'm not proposing an additional confirmation by Gecko. I'm > proposing that we replace the confirmation UI displayed by BlueVia in > step 3 of the original flow, with a confirmation UI displayed by > Gecko. So from the user's point of view it's almost exactly the same > behavior.
Also I didn't mention that there is no way for Gecko to know the users selected currency, that info is only shared between the user and the payment provider, so the payment letter displayed in Gecko would not be completed. Unless that we force the JWT to contain a default currency. _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security