285436 - Idea for new cookie handling

Status: RESOLVED WONTFIX

(Firefox :: Security, enhancement)

Description

[Fabian Zeindl]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050228 Firefox/1.0.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050228 Firefox/1.0.1

Hi

At the moment I handle my cookies like this: Keep Cookies is set to "Until I
close firefox", and I have some exceptions for the sites where I need them to be
stored longer.
Wouldn't it be good if firefox adds domains to this exceptionlist automatically
when I type in something in a webform on a page?
I think this would increase privacy for the dummyuser who doesn't even know what
cookies are....

Reproducible: Always

Comment 1

[Mike Connor [:mconnor]]

Just because a user fills in a webform does not mean they wish to always accept
cookies for that site.  Even a search box is a web form, so I don't believe this
is anything resembling useful.  If its just a matter of sites with logins,
password manager fills that separately, we don't need to automatically whitelist
for cookies as well.

We do need better UI for per-site settings to make it easier to whitelist sites,
but that's covered by another bug.

Comment 2

[Ben Fowler]

Mike, I may have misunderstood the Reporter's idea, because I don't see
the 'always' part of it that you reasonably object.

If his suggestion were implemented, I would probably use it.

I would love to have a 'generally accept cookies' option that 
accepted unexpected cookies and set them to expire at the session
end, regardless of the originating site's wishes.

There are a handful of sites where I would whitelist the ability
to have my lizard respect the requested cookie lifetime.

Comment 3

[Fabian Zeindl]

Yes, but I thought it would be good for users who don't even know what cookies
are. So when the log into a webpage the cookies won't get deleted when the close
Firefox.