466779 - Master password dialog is ugly and unfriendly. It does not introduce itself.

Status: RESOLVED DUPLICATE of bug 306730

(Thunderbird :: Security, defect)

Description

[Eino Mäkitalo]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; fi; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4
Build Identifier: versio 2.0.0.18 (20081105)

When I use both Firefox and Thunderbird. I can't tell which program is asking master password because dialog is not introducing itself.  It also reveals my emails before entering password.

How to fix:
1) Use custom dialog with good header "Mozilla Thunderbird - Master password"
2) Offer possibility to ask it once before opening any mails?

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

[Matthias Versen [:Matti]]

The masterpassword protects your stored password and of course not the mails.
TB asks at startup because it needs the encrypted password for the mail server to get the new mails and you seem to have configured to get the mails at startup.
We have another bug for encrypting the profile, search for it yourself.

Leaving open for the header but I don't know if this is really needed.
Isn't the dialog modal ?

Comment 2

[Mike Hanby]

I have to agree. "Password Required" should read "Thunderbird - Password Required" and "Firefox - Password Required" etc...

I notice that in Tbird 3 beta the Tbird icon is displayed on the form, so that's a start.

I was confused the first time I saw that form in Firefox 3. I had enabled the MP in FF, but it was weeks before I restarted FF. When that form popped up I hit cancel on it because it looked like a site phishing for a password.

I like the Tbird 3 one better because it is at least more descriptive (and has a nice key icon to boot).

Comment 3

[Wayne Mery (:wsmwk)]

(In reply to comment #2)
> I have to agree. "Password Required" should read "Thunderbird - Password
> Required" and "Firefox - Password Required" etc...
> 
> I notice that in Tbird 3 beta the Tbird icon is displayed on the form, so
> that's a start.
> 
> I was confused the first time I saw that form in Firefox 3. I had enabled the
> MP in FF, but it was weeks before I restarted FF. When that form popped up I
> hit cancel on it because it looked like a site phishing for a password.
> 
> I like the Tbird 3 one better because it is at least more descriptive (and has
> a nice key icon to boot).

that's because TB3 has Bug 239131 Thunderbird should use the new password manager, which includes numerous improvements
http://www.mozillamessaging.com/en-US/thunderbird/early_releases/
(suggest you backup your profile before using beta release)

  Eino, I've not found it confusing. Is it any better if you use TB3 beta?

Comment 4

[Mike Hanby]

I have actually found the FF3 one confusing as well. I routinely start FF3 with 5 or so password protected sites.

Normally a few of the multiple MP prompts will display without any text on the dialog. I've hit cancel on those a few times as well because I thought they were phishing attempts.

Of course, all this is moot when FF finally implements the single MP prompt (and hopefully uses the new and improved dialog in TB3).