144994 - Master password time out doesn´t work, it allways ask for the password

Status: VERIFIED WONTFIX

(Core Graveyard :: Security: UI, defect)

Description

[Dario]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0.0+) Gecko/20020515
BuildID:    2002051508

Even using quick lunch and having set the master password to be ask only the
first time is needed, each time I open the "mail and news" the program ask me
for the master password

Reproducible: Didn't try

Comment 1

[John Unruh]

WFM. If you are closing the application, then reopening it by using the icon in 
the system tray, the fact that you are asked for your master password again is 
expected behavior.

Comment 2

[John Unruh]

Works for me.

Comment 3

[Dario]

I closed the opened windows but the aplication is still running in the sistem
tray. So why do I need to login again? Whats the idea of quick lunch then? The
sesion should be opened until I close the program not the window

Comment 4

[John Unruh]

Reporter, what you are asking for is what we consider a serious security bug. 
See bug 125561. Quick launch is to restart the application again quickly, but 
the master password needs to be logged out of during the closing of the 
application.

Comment 5

[Kai Engert [:KaiE:]]

Dario,

the idea of quicklaunch is to not have to wait for the application to load.

However, a user can have certificates or passwords stored in the profile, which
could grant access to critical information.

When a user closes all visible windows, they most often assume that they closed
the application, and they are "logged out". To protect users from accidentially
staying logged in, we decided to log the user out when the last window is closed.

If you want to avoid having to log in again, please do not close all the
windows, leave one window open and minimize it.

Comment 6

[John Unruh]

V