Modern payment processor such as Stripe and Braintree allows developer to integrate payment on their website that contains no billing address. Even apps like Uber does not require billing.
If security is your main concern, Chrome already validates a legitimate user by asking for CVV code.
This is not a bug per se.
Thanks James. In the Basic Card Response spec [1], it is indeed optional. I'll inquire in which situation we (as the browser) want to require it for payment.
[1] https://www.w3.org/TR/payment-method-basic-card/
This was a decision by the Chrome team. We want to provide as much info to the merchant seller as possible to successfully complete the transaction. Note that this is already implemented on Android. This particular bug is for the desktop platforms to match the behavior. Go ahead with implementing this, please.
I think making it impossible to return without is fine for now. I agree with what James is saying, but the reality is that this is merchant-dependent. Since we lack an affordance in the API to say what did you do need, it's safer from a UX POV to always return back the full set of details.
That said, not all card have billing addresses (e.g. China Union Pay), so this is fine for now, but it might change in the future.
Comment 1 by ja...@blackfor.ge
, Apr 10 2017