@jessew secure element based google pay i don't think needs to? whether or not it does is a different question. but i think it exchanges them for some kinda token through the payment network, and uses that to provision the virtual card with its own account number (and a secure element-based 3d secure challenge). i'm not entirely sure what google's role in mediating payments through it is, but it does mitm the transactions and get all their details in that case, the exact same as apple pay.
also they used to use host card emulation (≈"cloud secure element") before, but i don't think they do anymore? but like, with apple pay, i don't think apple stores even the virtual card number, it should stay in the secure enclave.
@jessew yeah i don't see the difference between that and autofill, other than that google gets to store your details on their server, potentially in violation of pci dss (?)
@jessew what do you mean by that? i'm reading developer docs, and so when paying from chrome for android it can give you a 3ds cryptogram, but for any other devices, you just receive a card PAN and expiry date. and you have to trigger 3d secure yourself.
so i guess my question is, does it just transmit the card saved on file, and if so, what's the point? supposedly US-based users can use "virtual cards", which kind of resembles apple pay, but it's US-only.
@SuperDicq they're free not to run my program, but it's their personal choice. they shouldn't tell me what to do or claim it as some kinda universal truth.
and it's not like markup and styling are all that different. css is turing complete, though it can't loop without user interactions. i believe truetype fonts are turing complete as well. i don't think it being a program is a useful distinction. though i do like being able to easily try random people's programs in a sandbox instead of installing them on my computer.
@anemone@lizzie from my experience the average vanilla mastodon user doesn't even know enough about fedi to feel morally superior. also, it's the default, the whole point of elitism is you're better cause you don't use the default!