Issue 53: No Master Password Option
http://code.google.com/p/chromium/issues/detail?id=53

Comment #31 by drew.stonebraker:
pkasting wrote:
>Master passwords as
>implemented in other browsers provide more of an illusion of security than  
actual
>security.  They also inconvenience users.  Chrome uses the Windows crypto  
routines to
>encrypt local passwords, giving you some protection against remote data  
theft; for
>local data theft a master password wouldn't help.

I am very surprised this feature has been denied.  Pkasting's explanation  
does not
address the concern, and therefore leads me to believe that the need has  
been
misunderstood.

Even if there are ways around it... master passwords provide significant  
security
against guest users easily or accidentally obtaining an owner's passwords,  
and
therefore access to the owner's website accounts (e.g. online shopping,  
email,
etc.)... even website for which passwords are not stored, if the owner/user  
reuses
passwords.

It is only the lack of a master password that offers any inconvenience to  
users... as
long as the master password is off by default (as it is and should be in  
firefox),
users who don't want it never notice it.. but without the option users who  
do feel
the need for it are highly inconvenienced by being forced to not store  
passwords, or
to use a browser that has this feature.

2 things to improve upon firefox's feature:  in firefox, there are only 2  
options: on
or off.  When it is on, it requests a master password 3 times before  
opening a
firefox session (perhaps because I have 3 home page tabs with stored  
passwords.. but
this is a bug and needs to be fixed), and causes a major slow-down of the  
computer,
even though it does not seem to be using up resources.  However, it would  
be nice to
have a second option, where the master password is not needed to use  
websites with
sotred passwords... only to view the stored passwords.



-- 
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Chromium-bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/chromium-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to