92966 - "store password" should be able to store a password for a whole domain

Status: RESOLVED DUPLICATE of bug 589628

(Toolkit :: Password Manager, enhancement)

Description

[Nicolas Bock]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.2) Gecko/20010701
BuildID:    2001070116

When I click on the logon button on the page www.sprintpcs.com, I am redirected
to another server that produces the form where I am to enter my telephone number
and password. After entering this information, the password manager correctly
asks me if I would like to have it save my password. The next time I try to
logon though, I am redirected to a different server, so that the password
manager doesn't recognize that I have been there before and doesn't fill in my
telephone number and password. Examples for servers are: e12.sprintpcs.com,
e13.sprintpcs.com, b47.sprintpcs.com and so on. It would be nice therefore, if
the password manager would realize that all of those are in the same domain and
are asking me for the same password and account information. I don't know if
that is a useful feature beyond sprint pcs, but it would certainly help if there
were an option saying something like, "store password for whole domain
sprintpcs.com".

Reproducible: Always
Steps to Reproduce:
1. go to www.sprintpcs.com
2. click on log on
3. enter your telephone number and password
4. answer yes, when password manager asks you to store password
5. log off and repeat this procedure

Actual Results:  I am redirected to another server, and the password manager
doesn't prefill the login and password fields with the previously stored values.
For example, you could be first redirected to e12.sprintpcs.com and the second
time to e13.sprintpcs.com.

Expected Results:  It should offer something like "store password for domain
sprintpcs.com" and therefore recognize that e12.sprintpcs.com and
e13.sprintpcs.com are asking me the same.

Comment 1

[Stephane Saux]

off to password manager

Comment 2

[Jerome Lacoste]

*** Bug 100519 has been marked as a duplicate of this bug. ***

Comment 3

[Jerome Lacoste]

As noted in bug 100519, problem is happening as well with Hotmail.

Comment 4

[Jesse Ruderman]

*** Bug 67390 has been marked as a duplicate of this bug. ***

Comment 5

[Elmar Ludwig]

*** Bug 168437 has been marked as a duplicate of this bug. ***

Comment 6

[Ulrich Windl]

"Manage Stored passwords" should be able to "copy" or "move" data from one URI
to another. Possibly use regular expressions for a match. Visiting the file
where the
data is kept shows that passwords are "encoded". If I really forgot my password,
it would be a convenient place to look it up there.

Also for "Edit->Fill in Form" it would be nice if data for an alternate URL could
be filled in.

Comment 7

[Elmar Ludwig]

*** Bug 170154 has been marked as a duplicate of this bug. ***

Comment 8

[Craig]

I agree with Ulrich.

All the sites I've ever come across like this have had server names of the form
xxxnn.example.tld, where xxx is some text (usually "www") and nn are numbers. We
don't need full regular expressions, just an ability to have a "*" available at
least once, so that www*.example.com will match www37.example.com, etc.

Comment 9

[Heikki Toivonen (remove -bugzilla when emailing directly)]

Reassigning to new module owner.

Comment 10

[Matthias Versen [:Matti]]

*** Bug 191741 has been marked as a duplicate of this bug. ***

Comment 11

[Vaclav Dvorak]

This bug requests the opposite of bug 131913, but both are valid requests. See
bug 131913 comment 7 for a possible solution of both bugs.

Comment 12

[Asa Dotzler [:asa]]

*** Bug 237140 has been marked as a duplicate of this bug. ***

Comment 13

[Alex Pircher]

Same problem with www.sms.de
It uses Session-IDs as Subdomain, so everytime you go to www.sms.de
you are redirected to a domain like www-123456789abcdef01234567890abcdef.id.sms.de

As the reporter already wrote, there should be an additional Option:
"Store Password for whole (Sub)Domain"

Comment 14

[Peter van der Woude [:Peter6]]

*** Bug 262785 has been marked as a duplicate of this bug. ***

Comment 15

[Josh Birnbaum]

*** Bug 305009 has been marked as a duplicate of this bug. ***

Comment 16

[Elmar Ludwig]

*** Bug 309955 has been marked as a duplicate of this bug. ***

Comment 17

[Boris 'pi' Piwinger]

One special "domain" for this bug should be "intranet sites" (host names which are not domain names).

But I believe nobody works on all of the password manager bugs. This is bad since this is one of the features which really make a difference to low qulity browsers like IE.

pi

Comment 18

[Manish Goregaokar [:manishearth]]

Assigned as per request in IRC.

Comment 19

[Matthew N. [:MattN]]

This will likely first be implemented in fallback UI (autocomplete + context menu) in bug 589628.