759021 - Let consumer require PIN for purchases from marketplace

Status: RESOLVED WONTFIX

(Marketplace Graveyard :: Payments/Refunds, defect, P3)

Description

[Raymond Forbes[:rforbes]]

if a users browserid is cached a PIN must be required for purchases from the marketplace.

Comment 1

[Andy McKay]

Is there a way to tell if the browserid is cached?

Comment 2

[Kumar McMillan [:kumar]]

(In reply to Andy McKay [:andym] from comment #1)
> Is there a way to tell if the browserid is cached?

I'm interpreting 'cached' as the user was already logged in to browserid when they went to pay (we will get an assertion back from the service).

Comment 3

[Justin Scott [:fligtar]]

FYI that spec that's being discussed for this is in https://wiki.mozilla.org/Marketplace/Features/Purchase_PIN

As proposed we'd be encrypting keys using the PIN so for users that opt in we would always need their PIN, regardless of browserid state.

Comment 4

[Kumar McMillan [:kumar]]

is a PIN still required? Some email threads lately suggest otherwise.

Comment 5

[Raymond Forbes[:rforbes]]

the PIN is a required feature but it is optional for the user to enable.  if that makes sense.

Comment 6

[Kumar McMillan [:kumar]]

(In reply to Raymond Forbes[:rforbes] from comment #5)
> the PIN is a required feature but it is optional for the user to enable.  if
> that makes sense.

ok, that's what I thought too. I clarified the description here

Comment 7

[Wil Clouser [:clouserw]]

P3 for this milestone, thanks andym

Comment 8

[Andy McKay]

(In reply to Justin Scott [:fligtar] from comment #3)
> As proposed we'd be encrypting keys using the PIN so for users that opt in
> we would always need their PIN, regardless of browserid state.

The PIN (for PayPal at least) is stored on the PayPal server. We never see it and can't use it for any encryption.

Comment 9

[Andy McKay]

Sorry, I misunderstood. This isn't the PayPal PIN, but our own marketplace PIN that would allow us to encrypt / decrypt any user data. I'll remove the relevant bugs and rewrite them.

Comment 10

[Raymond Forbes[:rforbes]]

This PIN will no longer be used for encryption/decryption of user data.  This is purely to gate purchases.

Comment 11

[Andy McKay]

For now at least, as per payment spec "The purchasing PIN previously planned for Marketplace is on hold."