Redact dependentLocality from shippingAddress (#846)

marcoscaceres · ianbjacobs · commit 9dac11015513 · 2019-03-12T17:35:09.000-05:00
* Redact dependentLocality from shippingAddress

* Make redactList mandatory

* Removed dependentLocality, make redactList mandatory

* Clarify the note
diff --git a/index.html b/index.html
@@ -4330,7 +4330,28 @@ <h2>
             <a>Queue a task</a> on the <a>user interaction task source</a> to
             run the following steps:
             <ol>
-              <li>Let <var>redactList</var> be the empty list. Optionally, set
+              <li>
+                <div class="note" title="Privacy of recipient information">
+                  <p>
+                    The <var>redactList</var> limits the amount of personal
+                    information about the recipient that the API shares with
+                    the merchant.
+                  </p>
+                  <p>
+                    For merchants, the resulting <a>PaymentAddress</a> object
+                    provides enough information to, for example, calculate
+                    shipping costs, but, in most cases, not enough information
+                    to physically locate and uniquely identify the recipient.
+                  </p>
+                  <p>
+                    Unfortunately, even with the <var>redactList</var>,
+                    recipient anonymity cannot be assured. This is because in
+                    some countries postal codes are so fine-grained that they
+                    can uniquely identify a recipient.
+                  </p>
+                </div>
+              </li>
+              <li>Let <var>redactList</var> be the empty list. Set
               <var>redactList</var> to « "organization", "phone", "recipient",
               "addressLine" ».
               </li>
