Re: [Python-ideas] Password masking for getpass.getpass

2016-01-13 Thread Marko Rauhamaa
Steven D'Aprano : > What about those who are so frustrated with trying to get sites to > work that they just Allow All On This Page? I'm occasionally frustrated by that, but I simply won't read that page. Nothing truly important is lost. Marko -- https://mail.python.org/mailman/listinfo/python

Re: [Python-ideas] Password masking for getpass.getpass

2016-01-13 Thread Michael Torrie
On 01/13/2016 05:47 PM, Steven D'Aprano wrote: > What of the poor souls who, for whatever reason, can't use NoScript? > > What about those who are so frustrated with trying to get sites to work that > they just Allow All On This Page? I've seen websites that rely on anything > up to forty or fifty

Re: [Python-ideas] Password masking for getpass.getpass

2016-01-13 Thread Steven D'Aprano
On Thu, 14 Jan 2016 11:27 am, Chris Angelico wrote: > On Thu, Jan 14, 2016 at 11:17 AM, Ian Kelly wrote: >> I realize that I'm taking this thread off-topic, but yes it's >> important that the form itself be downloaded over a secure connection. >> If I can MitM the form response over an insecure

Re: [Python-ideas] Password masking for getpass.getpass

2016-01-13 Thread Steven D'Aprano
On Thu, 14 Jan 2016 11:17 am, Ian Kelly wrote: > On Wed, Jan 13, 2016 at 3:19 AM, Chris Angelico wrote: >> You're quite probably right that obfuscating the display is security >> theatre; but it's the security theatre that people are expecting. If >> you're about to enter your credit card details

Re: [Python-ideas] Password masking for getpass.getpass

2016-01-13 Thread Chris Angelico
On Thu, Jan 14, 2016 at 11:17 AM, Ian Kelly wrote: > On Wed, Jan 13, 2016 at 3:19 AM, Chris Angelico wrote: >> You're quite probably right that obfuscating the display is security >> theatre; but it's the security theatre that people are expecting. If >> you're about to enter your credit card det

Re: [Python-ideas] Password masking for getpass.getpass

2016-01-13 Thread Ian Kelly
On Wed, Jan 13, 2016 at 3:19 AM, Chris Angelico wrote: > You're quite probably right that obfuscating the display is security > theatre; but it's the security theatre that people are expecting. If > you're about to enter your credit card details into a web form, does > it really matter whether or