Closed
Bug 1313658
Opened 8 years ago
Closed 8 years ago
Integrate Startup Master Addon into Core Code
Categories
(Core :: Security: PSM, defect)
Core
Security: PSM
Tracking
()
RESOLVED
WONTFIX
People
(Reporter: tanstaafl, Unassigned)
Details
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0
Build ID: 20161019084923
Steps to reproduce:
Noted that Startup Master Addon eliminates the problem experienced with bug 177175
Actual results:
Noted that this Addon should be integrated into the Core Code, at least until the issue can be properly addressed - if the method used by the Addon is not the proper/best way to address it.
Expected results:
Installing Startup Master should not be required to prevent Multiple Master Password prompts when multiple Account Types are used.
I think that the base bug should be fixed and NOT this one as there is an addon that breaks the security (as it unlocks passwords at the start of Firefox being launched) and not when needed.
The base bug https://bugzilla.mozilla.org/show_bug.cgi?id=177175 should be fixed instead as it will ensure that whenever a password prompt occurs from Firefox it happens ONCE.
If you have installed the addon - master password timeout - that is good for security, this bug (1313658) will not solve the issue except at start up.
(In reply to Nigel from comment #1)
> I think that the base bug should be fixed
Well of course, so do I and the rest of us, but the point is, it hasn't been fixed in the 14 YEARS that it has been open. Unless you know something the rest of us don't know - like, someone has actually picked bug 177175 (no need to post the entire URL here in the bug tracker) and it is being fixed now - then my request to integrate the workaround that StartupMaster provides asap until it is properly fixed is very reasonable.
This would eliminate a massively major pain point for Thunderbird users, and wouldn't cost Firefox users anything except one additional preference (disabled by default is fine by me).
> and NOT this one as there is an addon that breaks the security (as it unlocks
> passwords at the start of Firefox being launched) and not when needed.
Whether or not that is actually 'breaking security' is questionable, but I do see your point.
That said, what possible reason could you have for being against this if the option is disabled by default?
Ok, so, Firefox can have this option (it would or should be an option) disabled by default.
> The base bug https://bugzilla.mozilla.org/show_bug.cgi?id=177175 should be
> fixed instead as it will ensure that whenever a password prompt occurs from
> Firefox it happens ONCE.
>
> If you have installed the addon - master password timeout - that is good for
> security, this bug (1313658) will not solve the issue except at start up.
We won't be addressing bug 177175 by incorporating the add-on into PSM, but maybe the Thunderbird team would be interested in doing so.
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago
Resolution: --- → WONTFIX
Thanks David... so, I'm unsure what change(s) I should make to this bug (or a new one if you prefer) to make this request only for TBird...
Should I just change the Component?
Yes, I would re-open this and change the product/component to something that seems appropriate.
You need to log in
before you can comment on or make changes to this bug.
Description
•