User Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20100101 Firefox/14.0.1 Iceweasel/14.0.1 Build ID: 20120719084024 Steps to reproduce: Assumptions Sync setup has already been done. 1. go to menu edit > preferences > sync 2. go to manage account > my recovery key 3. enter master password in presented dialog 4. go to manage account > my recovery key 5. recovery key gets displayed 6. close preferences dialog 7. do 1, 2 8. recovery key gets displayed Actual results: When displaying sync key for the first time (and only if master password has not been checked before elsewhere) master password is checked before sync recovery key is displayed. master password is not required anymore for displaying sync recovery key unless a. browser is restarted b. user clears active logins under menu edit > preferences > privacy > clear your recent history. Expected results: master password should be checked _every_ time sync recovery key is to be displayed, as is done for displaying saved passwords under edit > preferences > security > saved passwords > show passwords Current behavior leaves sync recovery key unprotected.
Sync 1.1 is going away.