Closed Bug 1134941 Opened 10 years ago Closed 8 years ago

[meta] Improve handling of saved login credentials between HTTP and HTTPS contexts

Categories

(Toolkit :: Password Manager, defect, P1)

Product:
Toolkit
Component:
Password Manager
Type:
defect

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: ckarlof, Unassigned)

References

(
URL
)

Details

(Keywords: meta, Whiteboard: security:passwords)

User Story

As a user I want PM to treat the credentials for http and https versions of the same site or destination in a way that gets me logged in fast.
      No description provided.
Priority: -- → P1
Assignee: ally → tanvi
Proposed policy for how to handle fill and capture for HTTP and HTTPS records with the same username and domain:
https://etherpad.mozilla.org/same-domain-http-https-passwords4
I will use this as the meta bug to implement the policies outlined in https://etherpad.mozilla.org/same-domain-http-https-passwords4 and make dependent bugs for each implementation.

Fill Policy Bugs:
* Autofill HTTP logins on HTTPS pages when HTTPS logins don't exist - bug 667233
* Autocomplete HTTPS logins on HTTP pages when HTTP logins don't exist - bug 1127567

Capture Policy Bugs:
TBD - individual bugs still need to be filed, but there is one capture bug already filed: bug 1127579
See Also: → 1127418
Summary: Improve handling of saved login credentials between HTTP and HTTPS contexts → [meta] Improve handling of saved login credentials between HTTP and HTTPS contexts
Keywords: meta
See Also: → 1150605
User Story: (updated)
Whiteboard: security:passwords
Blocks: 1167657
No longer blocks: 1167657
Depends on: 1174361
Assignee: tanvi → nobody
Depends on: 1272507
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.