Konqueror/fish kio slave remembering the password (even if it's for the
"session") when "remember password" has not been selected is downright
misleading, and looks like cheating. The user can feel very insecure,
with no obvious way of making it "forget" the password ("oh no, looks
like it has stored my password... **panic**... go to configure
konqueror, try to delete private data... it STILL remembers my
password... **more panic** ... I can't trust Konqueror any more!"). This
is critical on a public, shared computer.

If "remember password" is not selected, the password should be used once
for connecting and then forgotten. A "remember for session" option could
be added, along with a clear definition of "session" and a way to allow
the user to explicitly make Konqueror forget the password. It should be
made clear to the user that this password will remain only in RAM, and
not on the hard disk. This will ensure that the password won't be
recoverable later in case of a power failure or something. The user
might be at a public computer for a limited period of time (exactly the
situation in which I encountered this bug), and it may not be possible
for him/her to come back to the computer after the power has been
restored.


Users can be very sensitive about their passwords on remote machines, and KDE 
should respect this. Not only should Konqueror do the right thing, it should 
*take the user in confidence*, and the user should know exactly how Konqueror 
is dealing with the password. The user must be able to revoke the trust at any 
time.


I sincerely believe that this bug is not invalid. I'm not sure if it's 
considered proper etiquette around here if I change the status back, though, so 
for now I'm leaving it at invalid.

(I think a similar issue occurs with HTTP Basic Authentication, but I'm
not very sure.)

-- 
Konqueror remembers password when told not to with fish kioslave
https://bugs.launchpad.net/bugs/229545
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to