Browsers holding Credit Card info...is a scary thought

[Omega X]

I'm not kidding. This is real stuff: https://w3c.github.io/payment-request/
https://www.bleepingcomputer.com/news/t ... passwords/

Imagine the drive by stolen data. Bad Ads/Malware/Virusware/Malicious Addons/Malicious OSes/Crap ton of MITM.

[TheVisitor]

And its already in latest Nightly's .... Options->Privacy - Saved Cards... I have already unchecked the 'Autofill Credit cards...'

[Grumpus]

Kind of naive - These are the about:config items:
extensions.formautofill.creditCards.enabled
services.sync.engine.creditcards
services.sync.engine.creditcards.available
services.sync.log.logger.engine.creditcards
This last one is particularly worrisome due to logging if failed access, passwords or pins, etc.