249035 - Password manager in tools menu needs add password option (for forms where I want to store the password but have autocomplete turned off)

Status: RESOLVED WONTFIX

(SeaMonkey :: Passwords & Permissions, defect)

Description

[S^3]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040313
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040313

The listed website has the following lines:

<input type="text" name="SI" size="9" maxlength="9"
         autocomplete="off">
<input type="password" name="PIN" size="6" maxlength="6"
         autocomplete="off">

Even though autocomplete is turned off, I would like to
be able to save the password with the password manager.
There should be an option:
tools -> password manager -> add password
This would be analogous to the form -> save form info option.
This option should also save the username.

Reproducible: Always
Steps to Reproduce:
1. Go to webpage with autocomplete=off in the form
2. Put in authentication info
3. Visit site again

Actual Results:  
No password is stored

Expected Results:  
tools -> password manager -> save password
Revisit page
Password is filled in automatically

Comment 1

[Frank Wein [:mcsmurf]]

This was done to not break up with banking sites and security related sited. I
don't think we want to do this, do we (since this autocomplete="off" has its sense)?

Comment 2

[S^3]

autocomplete still has its meaning.  It should not,
by default, prompt to save the password when it encounters it.
(Like how it currently acts)
There should, however, be a way to override it if
the user disagrees.  If there are a lot of problems,
it should, at worst, give an extra warning discouraging
the use of the option, but the option should be there.
I should be able to make it save the password.

As in, I should control the browser, not the website I am visiting.

Comment 3

[R.K.Aa.]

Re. comment 3:
I believe there IS a way to override it? A hidden pref partial "workaround" was
made (must be used in combination with the use of a master password and
encryption!) See bug 124065 comment 11

Comment 4

[S^3]

Thank you for that link.  I tried it and it worked.

Still, I should not need to do that to get around
the autocomplete.  There should just be a menu
item to add the password info.  It would be
much simpler.

Comment 5

[R.K.Aa.]

Mozilla will likely be denied access to some major sites if your RFE was to be
accepted. That is why autocomplete=off was introduced in the first place: See
bug 63961.

The "workaround" with strong encryption and a hidden pref is already tempting
fate. If the workaround is made easily accessible, everybody will use it, and
the security issues Wells Fargo and others believe are there, are reintroduced.
IMO this RFE is an obvious "WONTFIX". 

Comment 6

[Bogdan Stroe]

See also bug 109810.

Comment 7

[Hidehiro Kozawa]

bug 245333 seams similar promlem (for firefox.)

Comment 8

[Peter Weilbacher]

S^3: as you probably have seen in bug 124065 comment 12, you can use the
bookmarklet from
http://www.squarefree.com/bookmarklets/forms.html#remember_password for exactly
the behaviour you want.

Although I agree with others to mark this one WONTFIX, I am not a module owner,
so I am not going to do it...

Comment 9

[Daniel Veditz [:dveditz]]

*** Bug 259441 has been marked as a duplicate of this bug. ***

Comment 10

[Andrew Schultz]

current policy is to not include this ability.  see bug 63961

resolving WONTFIX