aaronpkpopping up a level on this... frankly I think regardless of whether there ends up being payment extensions to http or whatever, there's still the more fundamental issue of fraud prevention and actually making money change hands that's not gonna be in http
