Security/Features/HighlightCleartextPasswords: Difference between revisions

Jump to navigation Jump to search
no edit summary
No edit summary
No edit summary
Line 13: Line 13:
* When the user clicks on the warning icon or focuses on the input box, a message pops up with text that interrupts the user (ex: doorhanger), "This will submit your password unencrypted/This is an unencrypted page."  The dialog will present the user with a choice.   
* When the user clicks on the warning icon or focuses on the input box, a message pops up with text that interrupts the user (ex: doorhanger), "This will submit your password unencrypted/This is an unencrypted page."  The dialog will present the user with a choice.   
** If we can determine the ssl version of the page, provide these to options: "Click here to go to the encrypted version of this page." &  "Click here to proceed stay on this page (not recommended)."
** If we can determine the ssl version of the page, provide these to options: "Click here to go to the encrypted version of this page." &  "Click here to proceed stay on this page (not recommended)."
** If we cannot determine the ssl version of the page, the user does not have any choices to select from.
** If we cannot determine the ssl version of the page, the user does not have any choices to select from.  Perhaps add a recommendation about being careful if using a shared/open/public wifi network.
** Perhaps include a checkbox for "Report to site owner".
** Perhaps include a checkbox for "Report to site owner".
* Do not autocomplete username and password if it's saved in Password Manager (require the user to go through the multi-user experience in password manager)
* Do not autocomplete username and password if it's saved in Password Manager (require the user to go through the multi-user experience in password manager)
canmove, Confirmed users
285

edits

Navigation menu