272600 - The log-in information can't be saved for some web sites

Status: VERIFIED INVALID

(Toolkit :: Form Manager, defect)

Description

[JongAm Park]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

For Hotmail, Yahoo,and Gmail, the Firefox browser, or probably the Mozilla
suite(SeaMonkey) also, can't remember log-in ID and password. Thus it can't
automatically fill in the information.



Reproducible: Always
Steps to Reproduce:
1. Try loging in to the Hotmail, Gmail and the Yahoo ( Yahoo! and SBCYahoo! )
2. If there is a "remember me" checkbox, check it
3. Log off the web site, and close your browser
4. relaunch your browser and try visiting the web sites and see if login
information is automatically filled in.


Actual Results:  
No information is filled in.

Expected Results:  
Log-in information should be filled in.

Compare the result with www.myrealbox.com. The information can be saved.
I know that there is a way to set field attribute to make your browser to
remember the information or not. However, maybe it applies to the hotmail. But
what about the Yahoo and Gmail?
Anyway, even though it is correct behavior, this problem should be addressed to
make the Mozilla browser compete fairly with the IE.

There are two issues.
Either...
   1. The browser can't remember the information.
   2. The script for "remember me" checkbox doesn't work for the Mozilla based
browser.

I know that those are two different issues. However to the end-users, they can
be the same issue.

Comment 1

[Phil Ringnalda (:philor)]

"Remember me" checkboxes in forms have nothing to do with Firefox's Password
Manager remembering logins, and everything to do with telling the site to set a
cookie so that it won't prompt you to log in again, if you don't log out.
According to your steps to reproduce, you are telling the site to set a cookie
in step 2, and then telling it to delete it in step 3. If you haven't changed
the cookie settings to throw away or refuse cookies, then when you sign in to
any of those three, and then *don't* log out, they will remember you (completely
for Gmail and Hotmail, your username but not your password for Yahoo!, because
that's what they choose to do).

Attributes on forms, setting autocomplete=off so that the Password Manager
doesn't come up and ask to save the login independent of the site setting
cookies, are a different matter, and not one that's going to change. If Firefox
doesn't honor those, then banking sites will refuse to allow any access with
Firefox, just like they did with Mozilla some time back. Of course, there's a
bookmarklet at
http://www.squarefree.com/bookmarklets/forms.html#remember_password that lets
you get around that...

Comment 2

[JongAm Park]

Hello.

Thank you for your answer. But please don't haste.

Did you test the myrealbox.com?

Even if you log it out, the Firefox fills ID and password when you visit it later.
It doesn't login automatically. But it just FILLS the data.

I didn't mention that the Firefox can't login automatically.
What I mention is that there are some web services where the Firefox doesn't FILL IN
the log-in information for the Web site.

I fully understand THEIR scripts are not related to the Firefox.
What I mean is that their own "DATA remembering" feature can't be used with the Firefox.
It is different issue. But to end-users' eyes, it is same.
So, I mentioned "TWO" issues.

Hope it helps you understand my description.

(In reply to comment #1)
> "Remember me" checkboxes in forms have nothing to do with Firefox's Password
> Manager remembering logins, and everything to do with telling the site to set a
> cookie so that it won't prompt you to log in again, if you don't log out.
> According to your steps to reproduce, you are telling the site to set a cookie
> in step 2, and then telling it to delete it in step 3. If you haven't changed
> the cookie settings to throw away or refuse cookies, then when you sign in to
> any of those three, and then *don't* log out, they will remember you (completely
> for Gmail and Hotmail, your username but not your password for Yahoo!, because
> that's what they choose to do).
> 
> Attributes on forms, setting autocomplete=off so that the Password Manager
> doesn't come up and ask to save the login independent of the site setting
> cookies, are a different matter, and not one that's going to change. If Firefox
> doesn't honor those, then banking sites will refuse to allow any access with
> Firefox, just like they did with Mozilla some time back. Of course, there's a
> bookmarklet at
> http://www.squarefree.com/bookmarklets/forms.html#remember_password that lets
> you get around that...

Comment 3

[Phil Ringnalda (:philor)]

Please don't use the [reply] link unless you are actually quoting something in
particular: otherwise it just adds a useless second copy of the previous comment.

Yes, I do understand the difference between myrealbox.com, where they trust you
to manage your own browser, and don't have autocomplete="off" in the HTML for
the login form, and Hotmail, Gmail, and Yahoo, none of which trust you, and all
of which have autocomplete="off" in the form. That is non-negotiable,
unchangeable, there is absolutely, positively, no way that Firefox can ignore
autocomplete="off". If it does, then no bank will allow Firefox users to access
online banking services. So, on sites that use autocomplete="off", you cannot
have Firefox fill in your login details unless you know how to use a
bookmarklet. You can only depend on their cookies, which will only work if you
don't log out, because that's how cookies work.

This is not a bug: it's working as designed, and it's designed the way it needs
to be designed. If you have further concerns and questions about it, then they
are support questions, not a bug, and should be directed to the support forum at
 http://forums.mozillazine.org/viewforum.php?f=38