68409 - W3C CUAP: Provide a mechanism to allow authentication information to expire

Status: NEW

(Core :: Networking: HTTP, enhancement, P5)

Description

[Gervase Markham [:gerv]]

[ This bug is one of the recommendations in the W3C's "Common User Agent 
Problems" document, URL above. One bug has been filed on each recommendation, 
for deciding whether we do it and, if not, whether we should. ]

1.8 Provide a mechanism to allow authentication information to expire.

     Many browsers allow configuration to save HTTP authentication
     [RFC2616, RFC2617] information ("remember my password"). They should
     also allow users to "flush" that authentication information on
     request. For instance, the user may wish to leave the user agent
     running but tell it to forget the password to access the user's bank
     account.

     Wrong: Most user agents consider that authentication information
     (e.g., password) provided by a user for a server/realm pair during a
     session is immutable for the duration of the session.

Comment 1

[Matthew T (active 1999-2002)]

*** This bug has been marked as a duplicate of 55181 ***

Comment 2

[Gervase Markham [:gerv]]

The bug, which is about compliance with the guidelines, is blocked by bug 55181.
Marking as such, and reopening. We should only close this bug when we comply :-)

Gerv

Comment 3

[Mitchell Stoltz (not reading bugmail)]

Reassigning to Gagan.

Comment 4

[Gervase Markham [:gerv]]

mstolz: You said "Assigning to gagan" and assigned to [e-mail]. Isn't 
gagan [e-mail]?

Gerv

Comment 5

[benc]

mass move, v2.
qa to me.

Comment 6

[Doug Turner (:dougt)]

moving neeti's futured bugs for triaging.

Comment 7

[benc]

-> defaults

Comment 8

[Darin Fisher]

hmm... there's other bugs already on file having to do with providing an
explicit logout mechanism... this RFE should probably be included/considered
with the work to solve that bug.

Comment 9

[Gervase Markham [:gerv]]

https://addons.mozilla.org/en-US/firefox/addon/http-logout/ does this.

Gerv

Comment 10

[Firefox Bug Husbandry Bot]

Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258