1463865 - (oskeystore) [meta] Support OS-level secret-keeping

Status: NEW

(Core :: Security: PSM, enhancement, P3)

Description

[J.C. Jones [:jcj] (he/they)]

This meta-bug tracks designing and then implementing an interface for generating, storing, and retrieving secrets from the operating systems on which Firefox runs.

Comment 1

[Tom S]

What is the use case for this feature?

Comment 2

[Franziskus Kiefer [:franziskus]]

> What is the use case for this feature?

This is going to be used for passwords stored in Firefox to start with (and should be used for all sensitive data Firefox puts on the hard drive in future).

Comment 3

[Peter Saint-Andre [:stpeter]]

AIUI, the first project to use this feature will be web payments, in order to store credit card data more securely. I believe that password storage will happen after we deploy this feature for web payments.

Comment 4

[duparchy]

Hi,
This is more a "feature request" than a bug report, but I strongly plead in favor of moving from "Primary password" (that most people don't activate and don't even know it exists ) to a platform protection when available, transparently activated instead.

Our company will probably move from Firefox to another browser because of that...

Comment 5

[duparchy]

Hi, It seems that latest FF (and TB) supports now that feature, yes ?
"Require Device sign in to fill and manage passwords"

Comment 6

[Dana Keeler (she/her) (use needinfo) [:keeler]]

(In reply to duparchy from comment #5)

Hi, It seems that latest FF (and TB) supports now that feature, yes ?
"Require Device sign in to fill and manage passwords"

No - that setting doesn't store secrets in OS-provided storage. It's more like "check if you're authorized to use this machine before accessing secrets stored by Firefox".