Closed Bug 558178 Opened 14 years ago Closed 1 year ago

Only show password capture dialog if we're reasonably sure the password was correct and the login was successful

Categories

(Toolkit :: Password Manager, enhancement, P3)

enhancement

Tracking

()

RESOLVED WONTFIX

People

(Reporter: david.latapie, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: [passwords:capture-UI] [blocked])

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; fr; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; fr; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3

With Google Chrome, the save password prompt only appears after a successful login, contrary to Firefox which make it appears ASAP. I prefer the Chrome way, my YMMV, that's why I ask for an option (about:config would suffice).

Reproducible: Always
OS: Mac OS X → All
Hardware: x86 → All
Component: Security → Password Manager
Product: Firefox → Toolkit
QA Contact: firefox → password.manager
Version: unspecified → Trunk
Agree. Asking to save password after successful login makes sense.

Firefox/16.0.1
See Also: → 441072
The heuristics can be tricky here. One I've used in the past is to only show the capture dialog after the password field is no longer visible. If the login failed, the site usually keeps the login form open so the user can try again. Password change flows can sometimes be tricky though because sometimes on success, the site takes the user back to her "Account settings" where a password field may still be visible. However, if we're confident we're in a "login flow", this might be a decent heuristic. Even if we guess wrong, if the user can still summon the capture dialog by clicking on the password widget thingy next to the URL bar, that might be good enough.
Summary: [Feature request] (optionally) Offer to save password only once authentification worked, like in Google Chrome → Only show password capture dialog if we're reasonably sure the password was correct and the login was successful
Status: UNCONFIRMED → NEW
Ever confirmed: true
Blocked by a technical and UX design.
Whiteboard: [blocked]
Whiteboard: [blocked] → [passwords:capture-UI] [blocked]
Priority: -- → P1
Lowering to P2 since it's not as important as making logins save/fill at all.
Priority: P1 → P2
Blocks: 1540727
Blocks: 657268

Moving to P3 as this is not happening in the next release cycle.

Priority: P2 → P3
Severity: normal → S3
Duplicate of this bug: 657268

Comment 2 and Comment 9 have valid reasoning: we don't have a reliable way to identity when submission was accepted by site or not and it's more important to offer to save logins (even if it was a false positive) rather than let user glance over it and lose access to their accounts.

Closing as WONTFIX for now. We may get back to this topic in the future when we will have an actionable idea.

Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.