198326 - deletes saved passwords when exiting a secure site

Status: RESOLVED DUPLICATE of bug 220022

(SeaMonkey :: Passwords & Permissions, defect)

Description

[dennis bloodnok]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.3) Gecko/20030312
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.3) Gecko/20030312

my isp's webmail interface allows you to log out, performing some javascript
magic to delete the session information. in previous versions of mozilla (on
other versions of windows - this is the first time i've tried this on winxp),
all was fine. on this version, the log out function deletes my saved
login/password information.

Reproducible: Always

Steps to Reproduce:
1. login to https://register.cnchost.com/home/mail/ clicking "save password"
2. click "log out"
3. during re-authorization, popup is now void of information previously saved
4. check password manager window - sure enough, it's gone (btw: the password
manager window no longer remembers its last resize...)

Actual Results:  
login/password information has been deleted

Expected Results:  
it should not have deleted the information - a password manager that doesn't
save information can't do much about managing passwords.

will test this against a windows98se install (of 1.4a) and a linux install (of
1.3) and append the results to this report

Comment 1

[dennis bloodnok]

this bug is also present on the linux version of 1.3 (Mozilla/5.0 (X11; U; Linux
i686; en-US; rv:1.3) Gecko/20030312)

Comment 2

[dennis bloodnok]

it is also present on win98 (Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.4a)
Gecko/20030312). perhaps this is an evangelism issue, although i don't see how a
website should be responsible for deleting a login/password...

Comment 3

[Asa Dotzler [:asa]]

dennis, are you able to reproduce this with 1.6 or newere? Are you sure it even
saves your password to begin with? If you create a new profile using the profile
manager and you visit the site and log in does the password manager activate and
save your password? 

Comment 4

[Jonathan Baron]

This happens to me with the last few nightly builds on Linux (today's
being 2004102321), but only at one site, my wife's email at
http://webmail.wcupa.edu
This is a Microsoft Exchange Webmail system that has a very strange
design, although it has worked pretty well with Mozilla for several
years.  It actually does go to a secure site, but the site is different
from the url just given.

This problem does not arise with any other secure sites, which
include quite a few.

The password is in the password manager.  (I checked it.)
And sometimes it stays there for the next login, and then
disappears.

I'm going to investigat further.

Comment 5

[Jonathan Baron]

It also happens with Mozilla 1.7.3 (from rpm) and Firefox 0.10, so
it is almost certainly the result of some recent change in the
Microsoft server, but I think it is still a bug in Mozilla because
these passwords just should not be deleted unless the user does it.

Comment 6

[Jonathan Baron]

Following
https://bugzilla.mozilla.org/show_bug.cgi?id=220022#c13
which is perhaps a related bug, I tried several times without
logging out, and it seems to work.  That is, the password
is not deleted.  I'll keep trying this.
Again, I still think this is a bug.

Comment 7

[dennis bloodnok]

lately, it's my netgear mr314 gateway that's been exhibiting this flaw. if i let
it timeout my connection, the browser misplaces my login and password. this is
on osx with mozilla 1.6.

Comment 8

[Gervase Markham [:gerv]]

This is an automated message, with ID "auto-resolve01".

This bug has had no comments for a long time. Statistically, we have found that
bug reports that have not been confirmed by a second user after three months are
highly unlikely to be the source of a fix to the code.

While your input is very important to us, our resources are limited and so we
are asking for your help in focussing our efforts. If you can still reproduce
this problem in the latest version of the product (see below for how to obtain a
copy) or, for feature requests, if it's not present in the latest version and
you still believe we should implement it, please visit the URL of this bug
(given at the top of this mail) and add a comment to that effect, giving more
reproduction information if you have it.

If it is not a problem any longer, you need take no action. If this bug is not
changed in any way in the next two weeks, it will be automatically resolved.
Thank you for your help in this matter.

The latest beta releases can be obtained from:
Firefox:     http://www.mozilla.org/projects/firefox/
Thunderbird: http://www.mozilla.org/products/thunderbird/releases/1.5beta1.html
Seamonkey:   http://www.mozilla.org/projects/seamonkey/

Comment 9

[Gervase Markham [:gerv]]

This bug has been automatically resolved after a period of inactivity (see above
comment). If anyone thinks this is incorrect, they should feel free to reopen it.

Comment 10

[Nelson Bolyard (seldom reads bugmail)]

*** This bug has been marked as a duplicate of 220022 ***