Re: [Snowdrift-discuss] Using Stripe.js will break LibreJS

2016-09-01 Thread Aaron Wolf
On 09/01/2016 07:22 AM, Bryan Richter wrote:
> On Thu, Sep 01, 2016 at 05:15:48PM +0300, Bryan Richter wrote:
>>
>> I think we need to bend on this one, accept the realities of 2016, and
>> use stripe.js anyway. We can try to provide advanced warning to
>> LibreJS/noscript fans if it's truly necessary.
> 
> Also, it would be quite simple to restrict inclusion of stripe.js on
> to just a few page(s). Then we can say "Heads up, here's a thing
> that's about to happen" when we send people there.
> 
> It should only be needed when a person adds or modifies their payment
> info. The system provides a token we can use on a recurring basis to
> do transactions later.
> 
> 

Agreed about this compromise, but we should also note that Paypal may
work without JS (not sure), and we could investigate Dwolla and others.
So, for the time where it's just one project:

* First we can work with Stripe's non-free JS reasonably sandboxed to
not interfere where it isn't needed

* Next, after "take my money" start, we can consider other payment
options since no splitting of payments is needed when it's just one project

* Long-term, we can consider what to do, whether we can feasibly manage
with multiple processors for multi-project situation or deal with the
compliance thing. Overall, we can aim to get help from the community at
that point.

I think making this compromise and communicating it is the right decision.




signature.asc
Description: OpenPGP digital signature
___
Discuss mailing list
Discuss@lists.snowdrift.coop
https://lists.snowdrift.coop/mailman/listinfo/discuss


Re: [Snowdrift-discuss] Using Stripe.js will break LibreJS

2016-09-01 Thread Bryan Richter
On Thu, Sep 01, 2016 at 05:15:48PM +0300, Bryan Richter wrote:
> 
> I think we need to bend on this one, accept the realities of 2016, and
> use stripe.js anyway. We can try to provide advanced warning to
> LibreJS/noscript fans if it's truly necessary.

Also, it would be quite simple to restrict inclusion of stripe.js on
to just a few page(s). Then we can say "Heads up, here's a thing
that's about to happen" when we send people there.

It should only be needed when a person adds or modifies their payment
info. The system provides a token we can use on a recurring basis to
do transactions later.


signature.asc
Description: Digital signature
___
Discuss mailing list
Discuss@lists.snowdrift.coop
https://lists.snowdrift.coop/mailman/listinfo/discuss


[Snowdrift-discuss] Using Stripe.js will break LibreJS

2016-09-01 Thread Bryan Richter
I found this in their IRC log:

https://botbot.me/freenode/stripe/2015-01-27/?msg=30596784&page=6

Confirmed just now:

https://botbot.me/freenode/stripe/2016-09-01/?msg=72325992&page=5

(Unfortunately I asked my question right as some lunatic was spamming
their channel with help requests, heh)

If we don't use stripe.js, we'd be stuck ensuring compliance on our
own, which would be lame.

I think we need to bend on this one, accept the realities of 2016, and
use stripe.js anyway. We can try to provide advanced warning to
LibreJS/noscript fans if it's truly necessary.


signature.asc
Description: Digital signature
___
Discuss mailing list
Discuss@lists.snowdrift.coop
https://lists.snowdrift.coop/mailman/listinfo/discuss


[Snowdrift-discuss] Focus of Effort, start of September

2016-09-01 Thread Bryan Richter
Hi all,

I'm officially back from the Scottish highlands.

Let's talk about what we'll be working on the next two weeks. For the
website, I know of three main areas:

1. Write specs and HTML/CSS mockups for project page, dashboard, and
   financial history

US-67
US-454
US-321
US-410
IS-399
IS-461

2. Prepare for master-to-production switch

US-37
IS-397

3. Add the mechanism and connect to Stripe

IS-353
IS-355
IS-461

I'm gonna start working on #3 now.

I've put the User Stories listed into a taskboard:
https://tree.taiga.io/project/snowdrift/taskboard/end-of-august

(Don't pay attention to the URL, it's actually called "Beginning of
September")

What does everyone else want to focus on during this time?


signature.asc
Description: Digital signature
___
Discuss mailing list
Discuss@lists.snowdrift.coop
https://lists.snowdrift.coop/mailman/listinfo/discuss