1844314 - Storing security questions and answers

Status: NEW

(Toolkit :: Password Manager, enhancement, P3)

Description

[Raul Bucata]

Attachment: Screenshot_12.png

Environment:
Operating System: Windows 10 PRO x64
Firefox version: Firefox Nightly 117.0a1 (2023-07-18) (64-bit)

Preconditions:
Clean profile

Steps to reproduce:

1. Navigate to: https://my.ny.gov/ActivateV4/activate.xhtml?rid=a064cd8c-203a-4fe4-9655-3a132380faa9&nygovidlang=en
2. Click on the "Answers" field located under the first security question.
3. Observe the result.

Expected Behavior:
The Password Generator is triggered.

Actual Behavior:
The Password Generator is not triggered.

Notes:

• Reproducible regardless of the status of ETP.
• Reproducible on the latest build of Firefox Nightly and Release.
• Works as expected using Chrome.
• Reproducible for the "Confirm Answer" input field.

Comment 1

[Dennis Schubert [:denschub]]

Moving this into the Password Manager site compat component.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:serg, could you have a look please?

For more information, please visit BugBot documentation.

Comment 3

[Sergey Galich [:serg]]

Raul, thanks for sharing this concern with us!

This is in fact a helpful feature using a generated random text for security answers. Security answers are nothing more than an extra password really. It adds security if users don't share personal information there.

However, we need to improve Firefox to support that better. Give user a choice to store questions and answers to security questions and properly suggest them when needed. Let me repurpose this bug for that improvement.