117552 - After browser opening Site with PW opens annoyance window

Status: RESOLVED WONTFIX

(SeaMonkey :: Passwords & Permissions, defect)

Description

[Georg Wild]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win95; en-US; rv:0.9.7+) Gecko/20011231
BuildID:    2001123103

After opening a site with PW in it I always got a annoyance window saying sth
about Saving Passwords. It seems you can't switch it off! I'll attach a copy, if
I find some way!

Reproducible: Sometimes
Steps to Reproduce:
Try opening sites with PWs

Comment 1

[Georg Wild]

Attachment: Window

Comment 2

[Boris Zbarsky [:bzbarsky]]

You can turn this off by turning off password manager in preferences...

Comment 3

[sairuh (rarely reading bugmail)]

right --also, iirc, that dlg is always displayed the first time [for each
profile] you sumbit userid/passwd info.

Comment 4

[Georg Wild]

Well, that's not true that this window opens only one time per profile. 
For example:
I go to http://www.egoport.de/, log in ->alert is shown. Then I do the same
again and the alert is shown again. And with special sites having a password on
each site you get this window every click!

I have as option in preferences: ... will ask for pw: if it has not been  used
for 60 minutes

Comment 5

[Boris Zbarsky [:bzbarsky]]

Georg, is this the dialog that asks for your Master password?  Or is this the 
dialog that offers to save login information for you?  I think you and sairuh 
are talking about different things...

Comment 6

[Georg Wild]

A screenshot of the window is available above as attachment!
http://bugzilla.mozilla.org/attachment.cgi?id=63143&action=view

Comment 7

[Peter Trudelle]

->morse

Comment 8

[Stephen P. Morse]

This dialog is real annoying and I was against having it from the start.  
However it was a CYA requirement from the Netscape legal department to reduce 
out liability in case someone's "sensitive" data was compromised due to our not 
disclosing that the saved data was not encrypted.

Although I'd love to dispose of this dialog, closing out as won't fix unless 
someone can't get legal to remove the requirement.

Addressing the various confusing comments in this report.

1. There is no pref to turn it off (sairuh was confusing it with the 
do-you-want-to-save dialog).

2. Reporter was initially wrong in stating that it occurs every time you open a 
site that asks for a password.  It occurs only once per profile, specifically it 
occurs the first time you explicitly say that you want to have your data saved.  
Reporter later corrected himself on this point.  That's what confused bzbarsky 
as well as sairuh.

Comment 9

[Peter Trudelle]

Do you remember the contact who required this?  Do we even *have* a legal
department anymore? Even if we did, how does that bind mozilla.org?  Does anyone
know if the AOL client encrypts such data, or just obscures it?

Comment 10

[Stephen P. Morse]

Person in legal was Kent Walker.  He's no longer listed in phonebook.

Comment 11

[Stephen P. Morse]

See also bug 117989.  I would like nothing better than for us to conclude that 
there is no longer any legal requirement for this dialog and I'll immediately 
rip it out of the product.

Comment 12

[Stephen P. Morse]

For the record, there have been several bug reports about the CYA dialog for 
saving sensitive information.  Here is a cross-reference list of them:

043503: Bad UI in "Saving Sensitive Information" dialog
102288: Wordings for password manager are specific to the application
117552: opening Site with PW opens annoyance window
117989: Save password shows alert that is vague
119114: logging into hotmail: 6 dialogs