Closed Bug 454147 Opened 16 years ago Closed 16 years ago

Cannot remember login informations with empty password

Categories

(Toolkit :: Password Manager, defect)

Product:
Toolkit
Component:
Password Manager
Version:
1.9.0 Branch
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
minor

Tracking

()

Status:
RESOLVED DUPLICATE of bug 399703

People

(Reporter: petr.smid, Unassigned)

Details

User-Agent:       Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.0.1) Gecko/2008070400 SUSE/3.0.1-4.1 Firefox/3.0.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.0.1) Gecko/2008070400 SUSE/3.0.1-4.1 Firefox/3.0.1

If a web page needs authentication and there is username but empty password, the firefox offers to remember the login information, but it dos not remember. Next time you open the web page it asks for login iformation again and the firefox does not fill in the username.

Reproducible: Always

Steps to Reproduce:
1. Open web page which needs autentication. (There is login name, but password is empty string)
2. Firefox offers to remember the password. Click "Remember"
3. Restart firefox.
4. Open the web page again. When the login dialog appears, there is no login name filled in and you have to retype it again.
Actual Results:  
after clicking "remember" it dos not remember login informations with empty password.

Expected Results:  
It should remember login informations even with empty password (Yes, on our web pages, we use sometimes empty passwords.)
Version: unspecified → 3.0 Branch
Seems to be the opposite of bug 217439?
Component: Security → Password Manager
Product: Firefox → Toolkit
QA Contact: firefox → password.manager
Version: 3.0 Branch → 1.9.0 Branch
Yes, it could be. In my opinion it is useful to be able to store empty passwords. (Because I don't even remember the login name.) Even that if it is not possible to save empty passwords it should not ask. If it asks, it should work.
Out of curiosity, what pages are you visiting that ask for a username but not password? That sounds like bad security practice.
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
Resolution: --- → DUPLICATE
Our internal pages. They are gate to our system, which needs password. But we don't internally use passwords here.

(Note: The page asks me for a password, but we don't use passwords there, so we leave the field empty.)
Btw. this is not form-based login - HTTP auth window pops up.
You need to log in before you can comment on or make changes to this bug.