Re: SeaMonkey and Password Manager

[Jonathan N. Little]

David E. Ross wrote:

On 2/9/2015 9:30 AM, Jonathan N. Little wrote:

David E. Ross wrote:


Web pages, a situation that is becoming more and more common.
In that case, the password is not filled in.


They are common of financial and banking sites, which you really,
really, really shouldn't save and autofill credentials! A practice that
is a safe as looking down the barrel to see if a gun is loaded.



I consider using Password Manager with a non-trivial master password to
be more secure than writing down my passwords


Hackers are good but so far not good enough to jump the wire and seek 
out and find your stashed log boot and remotely OCR it...



or having them in
plain-text files on my computer.



Well that IS just plain stupid, Sony might hire you with such a security 
plan. ;-)


--
Take care,

Jonathan
---
LITTLE WORKS STUDIO
http://www.LittleWorksStudio.com
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey and Password Manager

[David E. Ross]

On 2/9/2015 9:30 AM, Jonathan N. Little wrote:
> David E. Ross wrote:
> 
>> Web pages, a situation that is becoming more and more common.
>> In that case, the password is not filled in.
> 
> They are common of financial and banking sites, which you really, 
> really, really shouldn't save and autofill credentials! A practice that 
> is a safe as looking down the barrel to see if a gun is loaded.
> 

I consider using Password Manager with a non-trivial master password to
be more secure than writing down my passwords or having them in
plain-text files on my computer.

-- 
David E. Ross

I am sticking with SeaMonkey 2.26.1 until saved passwords can
be used when autocomplete=off.  See
.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey and Password Manager

[Michael Ströder]

David E. Ross wrote:
> On 2/9/2015 3:28 AM, Michael Ströder wrote:
>> David E. Ross wrote:
>>> Acting on a suggestion in an earlier thread in this newsgroup (or was it
>>> in the mozilla.general newsgroup?), I installed SeaMonkey 2.32.1,
>>> removed the Remember Passwords 1.1 extension, and installed the Saved
>>> Password Editor 2.8.2 extension.  I then found that my master password
>>> was no longer being requested, and automatic filling in user IDs and
>>> passwords no longer occurred.
>>
>> Since recent firefox and seamonkey now ignore the autocomplete=off on 
>> password
>> input fields you can just use SeaMonkey 2.32.1 without such an extension.
>>
>> Triggering the username/password auto-fill is a bit clumsy though as it does
>> not always just work. Clicking the password field before double-clicking the
>> username field seems to always work. Did not have the time to do in-depth
>> tests for a bug report yet.
> 
> Yes, autocomplete=off is generally ignored only when inputting a new
> password.  Then Password Manager will indeed allow the user to save the
> password.

It uses my old password stored before (with Remember Passwords extension).

> My experience, however, is that autocomplete=off is not ignored for
> passwords already saved if the user ID and password are entered in
> separate Web pages, a situation that is becoming more and more common.
> In that case, the password is not filled in.

You have to dig out the details on what makes the web page "separate".

At the moment things work for me.

Ciao, Michael.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey and Password Manager

[Jonathan N. Little]

David E. Ross wrote:


Web pages, a situation that is becoming more and more common.
In that case, the password is not filled in.


They are common of financial and banking sites, which you really, 
really, really shouldn't save and autofill credentials! A practice that 
is a safe as looking down the barrel to see if a gun is loaded.


--
Take care,

Jonathan
---
LITTLE WORKS STUDIO
http://www.LittleWorksStudio.com
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey and Password Manager

[David E. Ross]

On 2/9/2015 3:28 AM, Michael Ströder wrote:
> David E. Ross wrote:
>> Acting on a suggestion in an earlier thread in this newsgroup (or was it
>> in the mozilla.general newsgroup?), I installed SeaMonkey 2.32.1,
>> removed the Remember Passwords 1.1 extension, and installed the Saved
>> Password Editor 2.8.2 extension.  I then found that my master password
>> was no longer being requested, and automatic filling in user IDs and
>> passwords no longer occurred.
> 
> Since recent firefox and seamonkey now ignore the autocomplete=off on password
> input fields you can just use SeaMonkey 2.32.1 without such an extension.
> 
> Triggering the username/password auto-fill is a bit clumsy though as it does
> not always just work. Clicking the password field before double-clicking the
> username field seems to always work. Did not have the time to do in-depth
> tests for a bug report yet.
> 
> Ciao, Michael.
> 

Yes, autocomplete=off is generally ignored only when inputting a new
password.  Then Password Manager will indeed allow the user to save the
password.

My experience, however, is that autocomplete=off is not ignored for
passwords already saved if the user ID and password are entered in
separate Web pages, a situation that is becoming more and more common.
In that case, the password is not filled in.

-- 
David E. Ross

I am sticking with SeaMonkey 2.26.1 until saved passwords can
be used when autocomplete=off.  See
.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey and Password Manager

[Michael Ströder]

David E. Ross wrote:
> Acting on a suggestion in an earlier thread in this newsgroup (or was it
> in the mozilla.general newsgroup?), I installed SeaMonkey 2.32.1,
> removed the Remember Passwords 1.1 extension, and installed the Saved
> Password Editor 2.8.2 extension.  I then found that my master password
> was no longer being requested, and automatic filling in user IDs and
> passwords no longer occurred.

Since recent firefox and seamonkey now ignore the autocomplete=off on password
input fields you can just use SeaMonkey 2.32.1 without such an extension.

Triggering the username/password auto-fill is a bit clumsy though as it does
not always just work. Clicking the password field before double-clicking the
username field seems to always work. Did not have the time to do in-depth
tests for a bug report yet.

Ciao, Michael.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

SeaMonkey and Password Manager

[David E. Ross]

Acting on a suggestion in an earlier thread in this newsgroup (or was it
in the mozilla.general newsgroup?), I installed SeaMonkey 2.32.1,
removed the Remember Passwords 1.1 extension, and installed the Saved
Password Editor 2.8.2 extension.  I then found that my master password
was no longer being requested, and automatic filling in user IDs and
passwords no longer occurred.

Fortunately, before I install a new version of SeaMonkey, I copy and
save all four of my profiles.  That way I easily reverted back to
SeaMonkey 2.26.1.

Please, someone fix bug #433238.

-- 
David E. Ross

I am sticking with SeaMonkey 2.26.1 until saved passwords can
be used when autocomplete=off.  See
.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey