626376 - Redesign master password dialog

Status: RESOLVED DUPLICATE of bug 809682

(Core Graveyard :: Security: UI, defect)

Description

[n.t.koopman]

User-Agent:       Mozilla/5.0 (X11; Linux x86_64; rv:2.0b9) Gecko/20100101 Firefox/4.0b9
Build Identifier: 

Today I was watching a movie, and suddenly Firefox popped up out of nowhere and asked for my master password. It turns out it was 'just' Sync, but it was the final straw for me to open this.

Bug 570421 contains a few large issues and some discussion, but I think it is a good idea to put this in one central location. Current issues with the master password dialog:

Bug 101611 - Websites can easily spoof the "Master Password" dialog
Bug 177175 - In certain situations, more than one "Master Password" prompt can appear
Bug 302238 - No feedback when you enter a wrong password
Bug 306730 - "Please enter the master password for the Software Security Device" is not obvious
Bug 397045 - Other applications (like Thunderbird) use the exact same dialog, meaning there is no way to distinguish them
- "Master Password" dialog steals focus

I think all of these issues could be better solved by implementing a different way of asking for the master password. Firefox already uses hiding bars for everything else, so maybe this can be implemented in that way.

Is a new "dialog" necessary? If yes, how should it behave?

Reproducible: Always

Comment 1

[Chris Wood]

Looks like a duplicate of bug 524901

Comment 2

[Chris Wood]

Sorry ignore that :*/

Comment 3

[manwesulimo2004]

There is a mockup for a new Master Password dialog attached to Bug 809682. You might want to check it out.

Comment 4

[Matthew N. [:MattN]]

Forward-duping since there are more comments and people CC'd on bug 809682.