1739732 - Encrypt cookies (advanced)

Status: RESOLVED DUPLICATE of bug 56788

(Core :: Networking: Cookies, enhancement)

Description

[richmail]

Attachment: Screen Shot 2021-11-05 at 6.38.03 PM.jpg

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36

Steps to reproduce:

A tweak in about:config or in the settings that allows the encryption of cookies. This prevents malware that steals your cookies

Actual results:

Without encryption, cookie loggers can easily steal your cookies and impersonate as you online.

Expected results:

When you launch Firefox, it will prompt you to type in a password to unlock the encrypted cookies.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug is invalid.
If you think the bot is wrong, please reopen the bug and move it back to its prior component.

Please note that this is a production bug database used by the Mozilla community to develop Firefox, Thunderbird and other products.
Filing test bugs here will waste the time of our contributors, volunteers and employees.
If you continue to abuse bugzilla.mozilla.org, your account will be disabled.

Comment 2

[Andre Klapper]

This proposal does not solve any problem and does not make anything more secure, and this proposal creates a false sense of "security".

When you launch Firefox, it will prompt you to type in a password to unlock the encrypted cookies.

And afterwards, nothing prevents "malware that steals your cookies". And before, nothing prevented malware to install a keylogger to read the password that typed in.

Comment 3

[richmail]

(In reply to Andre Klapper from comment #2)

This proposal does not solve any problem and does not make anything more secure, and this proposal creates a false sense of "security".

When you launch Firefox, it will prompt you to type in a password to unlock the encrypted cookies.

And afterwards, nothing prevents "malware that steals your cookies". And before, nothing prevented malware to install a keylogger to read the password that typed in.

oh...okay