Currently users have no option to control sending credentials to the sites which use provides WWW-Authenticate: Negotiate method. By default sending credentials is disabled, only when network.negotiate-auth.trusted-uris is set appropriately, then credentials are send the the server. We'd rather to ask users if they want to send credentials similar way the users are asked to share the geolocation data with server, ie. using permission interface. Dialog could look like: Would you like to share your credentials with this site? Share Credentials|Always Share Credentials|Never Share Credentials
I'd like to work on this, but I need to know if there's a positive attitude to this feature and someone willing to do the review of the code.
You need to log in before you can comment on or make changes to this bug.