249115 - Allow wildcards & password management by domains

Status: RESOLVED WONTFIX

(Toolkit :: Password Manager, enhancement, P3)

Description

[Justin]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040206 Firefox/0.8
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040206 Firefox/0.8

I use a lot of intrAnet sites.  All of which have the same user/password
combinations and force me to change that password every 3 months.
Right now I can use the password manager to handle that but I end up with a long
list of entries.  For example,
circuit.domain.com
expenses.domain.com
patents.domain.com
etc.

So, when I change my password (every 10-12 weeks), I have 2 options
1) go in to the password manager and change everything (which is the better
solution, but I don't do it), or
2) wait for the authentication dialog to come up and retypr the password and
check the "Remeber" box.  The problem there is since the password is "*"'ed out
I never remeber if it is using gthe old or new password, & I usually retype my
password.  Thus defeating the purpose of the password manager.

It would be nice if I could put a wildcard entry into the password manager, say
"*.domain.com"  and anything matching that regular expression would have the
same user/password combo.  
Then I would only have to change 1 password not N passwords.

Reproducible: Always
Steps to Reproduce:

Comment 1

[Vincent]

Hi,

Same thing here. My ISP updated the interface to access mails via the web (based
on IMP Horde - http://www.horde.org/imp/). 
Ancient address was http://imp.free.fr, now maps on (so far)
http://imp1-q.free.fr
http://imp2-q.free.fr
...
http://imp6-q.free.fr

Firefox password manager (set on imp.free.fr) cannot cope with this. Name and
password input fields are therefore left blank.

I tried to edit the signons.txt file in my profile and putting regexps in the
corresponding fields. Tried both http://imp*.free.fr and http://imp*.
It did not work.

Mentions are made (in bug #221534) about similar bugs in image/cookies managers,
both fixed by the adblock extension. Unfortunately, it has nothing to do with
passwords.

---
Using Mozilla/5.0 (Windows; U; Windows NT 5.0; fr; rv:1.7) Gecko/20040626
Firefox/0.9.1 + "external shell" security patch

Comment 2

[Phil Ringnalda (:philor)]

*** Bug 309955 has been marked as a duplicate of this bug. ***

Comment 3

[Samuel Sidler (old account; do not CC)]

Confirming as a RFE. Hardware/OS -> All.

Reseting QA/Assignee.

This is just like bug 92966, but I'm not sure if Fx reuses the suite code for this, so not duping to it.

Comment 4

[David E. Ross]

For passwords, it might be safer if there were limits on how much of a URL can be expressed via a wildcard.  See Bug 221534 about this issue, which I wrote and recently withdrew.  

Comment 9

[Justin Dolske [:Dolske]]

The "Mass Password Reset" extension offers a partial solution to this problem: https://addons.mozilla.org/en-US/firefox/addon/9652

Comment 11

[Emmanuel Tychon]

Still the same "problem". Extensions such as 1Password can do that, but they are not free, and slow down the browser. It would be really nice to have something like a username and password for "http://*.domain.com".

Comment 12

[Matthew N. [:MattN]]

Improved subdomain support with manual interaction will come with bug 589628 but this bug can track having the better autofill experience.