Marketplace/TrustedUIRework

Marketplace Payments is now the only consumer of the Trusted UI. Should we keep it?

Originally created in: https://bugzilla.mozilla.org/show_bug.cgi?id=794999

Advantages

What does the Trusted UI provide that is of value?

  • A global cookie jar so that information can be re-used across apps.

Problems

What problems does the Trusted UI cause?

Platform

  • Maintenance
  • Multiple bugs keep occurring as the platform evolves.
  • List of bugs:

UX

  • The small screen is a problem for UX.
  • It's not obvious what the screen actually indicates to the consumer.

Security

  • Doesn't fix a range of security issues.
  • Is still spoofable.

Solutions

What's a better approach?