sync recovery keys are displayed without asking for master password

RESOLVED WONTFIX

Status

Cloud Services
Firefox Sync: UI
P3
normal
RESOLVED WONTFIX
5 years ago
2 years ago

People

(Reporter: bandook3, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

5 years ago
User Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20100101 Firefox/14.0.1 Iceweasel/14.0.1
Build ID: 20120719084024

Steps to reproduce:

Assumptions
Sync setup has already been done.

1. go to menu edit > preferences > sync
2. go to manage account > my recovery key
3. enter master password in presented dialog
4. go to manage account > my recovery key
5. recovery key gets displayed

6. close preferences dialog 
7. do 1, 2
8. recovery key gets displayed



Actual results:

When displaying sync key for the first time (and only if master password has not been checked before elsewhere) master password is checked before sync recovery key is displayed. 

master password is not required anymore for displaying sync recovery key unless 
a. browser is restarted
b. user clears active logins under  
    menu edit > preferences > privacy > clear your recent history.



Expected results:

master password should be checked _every_ time sync recovery key is to be displayed, as is done for displaying saved passwords under 
    edit > preferences > security > saved passwords > show passwords

Current behavior leaves sync recovery key unprotected.
(Reporter)

Updated

5 years ago
OS: Linux → All
Priority: -- → P3
Hardware: x86 → All
Component: Untriaged → Firefox Sync: UI
Product: Firefox → Mozilla Services
Version: 14 Branch → unspecified
Sync 1.1 is going away.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.