Closed Bug 1380000 Opened 7 years ago Closed 7 years ago

Master Password dialogue should identify itself

Categories

(Thunderbird :: Untriaged, defect)

Product:
Thunderbird
Component:
Untriaged
Version:
52 Branch
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 306730

People

(Reporter: Henry.Kafeman, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0
Build ID: 20170608105825

Steps to reproduce:

Caused Master Password Dialogue to popup.



Actual results:

At the moment it just says (Dialogue title and contents):

Password Required
Please enter the master password for the Software Security Device.



Expected results:

I would like to strongly suggest that as an additional security measure that, when Thunderbird (and Firefox) are prompting for the Master password, the dialogue should indicate which program is asking for the details.

Any malware could pop up a similar dialogue at any time and trick the user into entering the Password. At least if the dialogue had details of the application, the user would be more likely to spot if it came up inappropriately, etc.

Thanks
This is covered in bug 306730
Group: mail-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Summary: Master Password dialogue - Security measure → Master Password dialogue should identify itself
Okay good so many others have identified this going back 12 years!

So as many have said, why has this not been resolved?

It obviously needs an innovative out of the box solution or re-wrting of some code!

The Developers must be able to resolve this surely?

Thanks
Henry
You need to log in before you can comment on or make changes to this bug.