1265369 - Do not default to persist permissions: "Don't ask again for this site"

Status: RESOLVED INCOMPLETE

(Firefox for Android Graveyard :: General, enhancement)

Description

[heinrichmartin]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Build ID: 20160407164938
Firefox for Android

Steps to reproduce:

Visit a page that requires special permissions (e.g. location service at https://gmaps-samples-v3.googlecode.com/svn/trunk/geolocate/geolocate.html) on my android device.


Actual results:

The checkbox for persisting the decision "Don't ask again for this site" is checked by default. This is not feasible when I always want to decide (even if I always allow).

It is likely that users persist their decision accidentally.


Expected results:

Persistence should be opt-in, i.e. the checkbox shall not be checked by default. Note that this is the way it works on the desktop version.

It is feasible to check the box once to remember the decision, but it is not feasible to uncheck it over and over again.

Comment 1

[Alexandru Simonca [:asimonca], Release Desktop QA]

From a users point of view, I think that this is a valid point. Fewer actions make for a better user experience.
However, I'm marking this as an enhancement.

Anthony, what is your take on this issue?

Comment 2

[Anthony Lam (:antlam) Find me, @antlam on Slack!]

Hm.. I don't think this is necessarily an "enhancement" per se. It really depends on the user and the context. 

For example, maps.google.com asking me for location? I probably want that checkbox enabled if I'm a frequent in-browser maps user. Somesite.com asking me for the same permission? I probably want to it off. 

Either way, I don't think changing this to 'off' by default is necessarily an "expected result". Also, I think being consistent with ourselves in all other places is what's most important so I don't want to just make this one off change quite so hastily.

Comment 3

[Alexandru Simonca [:asimonca], Release Desktop QA]

OK, that is also a valid point. I'm going to leave this open for tracking purposes in case you decide to change it along the way.

Comment 4

[heinrichmartin]

The direction of this discussion does not sound like the Mozilla philosophy. When it comes to security or privacy, I'd expect defensive defaults! There should be no chance to accidentally persist security or privacy exceptions (expected: one click for temporary exception, two clicks for permanent exception). I don't think this is an "enhencement".

When talking about "being consistent with ourselves", please consider the desktop version of Firefox which defaults to _not_ persist the exception.

Comment 5

[BMO Automation]

We have completed our launch of our new Firefox on Android. The development of the new versions use GitHub for issue tracking. If the bug report still reproduces in a current version of [Firefox on Android nightly](https://play.google.com/store/apps/details?id=org.mozilla.fenix) an issue can be reported at the [Fenix GitHub project](https://github.com/mozilla-mobile/fenix/). If you want to discuss your report please use [Mozilla's chat](https://wiki.mozilla.org/Matrix#Connect_to_Matrix) server https://chat.mozilla.org and join the [#fenix](https://chat.mozilla.org/#/room/#fenix:mozilla.org) channel.