https://bugs.kde.org/show_bug.cgi?id=402936
David Rosca <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |INTENTIONAL Status|REPORTED |RESOLVED --- Comment #1 from David Rosca <[email protected]> --- KWallet/GnomeKeyring are not available on all systems, and those are only "secure" options that could work without any user interaction. Everything else requires some user interaction, like creating password (as what encrypted database backend does). You are correct, the passwords are stored in plain-text by default. Alternative would be to generate some key (which will be stored in the profile directory) and encrypt the password with it, but I don't really think this is any different (both are easily accessible for anyone that have access to your local files). Also in case of KWallet, once a wallet is opened (usually automatically with login) any application have access to all stored passwords, so it's not really secure either. I don't really see any solution to this, there is no way to have secure storage without prompting user for password every time the browser is started, and that's not something that most users will be willing to do. So the default won't be changed. -- You are receiving this mail because: You are watching all bug changes.
