2
edits
Firefox/Feature Brainstorming:Security: Difference between revisions
Jump to navigation
Jump to search
Firefox/Feature Brainstorming:Security (view source)
Revision as of 13:20, 5 August 2008
, 5 August 2008no edit summary
No edit summary |
No edit summary |
||
| Line 310: | Line 310: | ||
; Break JavaScript Execution | ; Break JavaScript Execution | ||
* Reiterating what was mentioned already, infinite (message) loops essentially lock up the browser. Some kind of hot key combination or special behavior (close button/box kills code execution) should be implemented to halt unending JavaScript code. | * Reiterating what was mentioned already, infinite (message) loops essentially lock up the browser. Some kind of hot key combination or special behavior (close button/box kills code execution) should be implemented to halt unending JavaScript code. | ||
</td><td> | |||
</td></tr> | |||
<tr><td> | |||
; Ability to copy fingerprint of SSL certificate | |||
* In the "Certificate Viewer" it is not possible to copy the fingerprint shown. Copying the fingerprint to the clipboard would allow the user to store the fingerprint at an arbitrary location for later reference. (For example, I verified the SSL fingerprint for my online banking site with my local branch, so I don't care whether it's signed by a CA, but prefer to check the fingerprint myself.) | |||
</td><td> | |||
</td></tr> | |||
<tr><td> | |||
; "Alert me when this site changes its SSL certificate" | |||
* It would be nice to have an option to be alerted if a site changes its SSL certificate, e.g. after a certificate has been thoroughly verified by obtaining the fingerprint from a trusted source. | |||
</td><td> | |||
</td></tr> | |||
<tr><td> | |||
; One-click "accept certificate for this session" (as in Firefox 2) | |||
* It would be nice to have a button "Accept certificate temporarily for this session", so one does not need three clicks and a certificate download (hasn't the certificate been downloaded already?) to view a site that presents a self-signed certificate. For a novice user this button might be hidden, but an expert should have such an option... (I want a browser, not a nanny.) | |||
</td><td> | </td><td> | ||
| Line 416: | Line 438: | ||
; "Clear Private Data to be better managed" option for password Manager | ; "Clear Private Data to be better managed" option for password Manager | ||
* If someone has set a master password and then via clear private data he or someone else checks on Saved Passwords option, the person should be prompted to enter the master password. This way it would prevent someone else from erasing saved passwords when he does not have access to the same. | * If someone has set a master password and then via clear private data he or someone else checks on Saved Passwords option, the person should be prompted to enter the master password. This way it would prevent someone else from erasing saved passwords when he does not have access to the same. | ||