Streamlined Checkout on the Web

Ian Jacobs, W3CAndre Lyver, Shopify

Anthony Vallée-Dubois, Google

The World Wide Web Consortium (W3C) is an international community that, since 1994, develops open standards to ensure the long-term growth of the Web.

Who is W3C

Singapore face-to-face April 2018

Source: Baymard Institute

How to Reduce Cart Abandonment?= we think we can help

Singapore face-to-face April 2018

Source: barilliance.com

Abandonment Worse on Mobile

Singapore face-to-face April 2018

Source: Kount

CNP Fraud on the Rise

Singapore face-to-face April 2018

Source: americanbanker.com

Fraud Migrates

• Mobile (hardware capabilities, device connectivity, etc.)

• Strong authentication rules and regs(e.g., 3DS2, PSD2)

• Payment innovation (digital wallets, blockchain, faster payments)

• EMV migration (fraud moves online)

Drivers of Change

• Streamline checkout, facilitated by the browser

• Secure data and enable strong authentication

• Foster payment method innovation

Time to Fix Web Payments

Source: Turtle Media

Web or Hybrid or Native?

Singapore face-to-face April 2018

Focus of today’s

discussion

Why the Web: New Capabilities

Singapore face-to-face April 2018

Why the Web: Customer Reach

Source: comscore

Singapore face-to-face April 2018

Why the Web:Desktop, Mobile, More

Source: comscore

Singapore face-to-face April 2018

Source: comscore

Why the Web:App Saturation

Web Payments Working GroupSingapore face-to-face April 2018

• Abine

• Airbnb

• Alibaba

• American Express

• Apple

• BarrierBreak

• Blockstream

• Bloomberg

• Bluesnap

• Bread

• Capital One

• Canton Consulting

• Carte Bancaires (CB)

• CDT

• China Mobile

• Department of Human Services

• Deque Systems

• Deutsche Telekom

• Digital Bazaar

• Discover

• ETRI

• Facebook

• Federal Reserve Bank of Minneapolis

• FIME

• Google

• GROUPE BPCE

• GS1

• GSMA

• HM Government

• IBM

• INRIA

• Inswave

• Intel

• IFSF

• ISO 20022 Registration Authority

• JCB

• Klarna

• Knowbility

• KPN

• LGE

• Lyra Network

• Mastercard

• MAG

• Microsoft

• Mozilla

• NACS

• NIC.br

• Open Banking LTD

• Opera

• Oracle

• Orange

• Paciello Group

• PayCert

• PayGate

• Ripple

• Samsung

• Seeroo

• Shift4

• Shopify

• Spec-Ops

• Stripe

• Telenor

• Tencent

• The Clearing House

• Unify

• Visa

• Wiley

• Worldpay

The Problem with Mobile Checkout Today

• Reuse stored data

• Consistency across the web

Payment Request API

Demo of basic-card

Proliferation of Payment Buttons

Shopify’s Dynamic Checkout

• Support for third party payment handlers

• Simplified user experience

• Improve payment security

Payment Handlers

Demo of payment handlers

Merchant Perspective:Lack of support for discount codes

Early Findings:

• Improved checkout time to completion

• User experience challenges (e.g., unfamiliar UI)

Browser Perspective:Where is Payment Request?

Hint: Everywhere

Payment Request Streamlines Checkout

• This is a screen shot of a live merchant Web site.

• The payment UI is designed and controlled by Chrome.

• User credentials are already present; user only needs to type in a CVC.

Animation

• Chrome can seamlessly install payment handlers for merchant-accepted payment methods.

• Chrome displays these as though they have been installed, for selection by the user.

• This increases payment handler discoverability and visibility.

Web-based Google Pay handler shown at Google I/O 2018

Payment HandlerOptimizations

Implementation Status

• All major browsers are implementing Payment Request API.

• Facebook, Shopify, Stripe, Braintree, WePay, BS Payone support Payment Request API.

• Expect Payment Request API to advance to Recommendation by Q4 2018.

• Start planning to use the API now. Implementations will solidify over the next 9 months.

• Implementations of Payment Handler API and Payment Method Manifest are still experimental and we welcome early feedback!

• 7 Feb 2018: Google announces intent to ship Payment Handler API.

• Google also working with native mobile app providers on integration of Android Pay, Alipay, Samsung Pay, MasterPass, PayPal, Square, etc.

Hot Topics• Card Security

• Tokenization

• 3-D Secure 2

• PSD2

• Strong customer authentication

• Open banking APIs (push payments)

Web Authentication

Get Involved in W3C!• We welcome feedback, implementations, contributions

• Contact Ian Jacobs <ij@w3.org>

• This presentation:https://www.w3.org/2018/Talks/ij_pcs_20180509/w3c.pdf

• Web Payment Working Group specifications

• Demos, FAQ and Developer Portal

• PR API on Mozilla Developer Network and code samples

• More W3C Working Groups and Community Groups