Vlákno názorů k článku
Chyba ve Firefoxu dovoluje získat uložená hesla od anonym - Podle popisu Master Password Timeout se mi nezda,...

Podle popisu Master Password Timeout se mi nezda, ze by se ptalo jestli ma odeslat informaci. Spis se pta na master heslo, ktere osobne nastavene nemam.

Osobne by mi nejvic vyhovovalo reseni typu "About the only reliable solution might be to make the password behave like the multi-password case even when there's only one: require the user to start typing in the form before filling it in or bringing up a drop-down to choose from. And only accept authentic events, of course, not script-generated key events."

A k tomu pridat "One possibility (which I've been considering for addressing this in Camino)
could be to remember passwords for a domain, but also remember
white-/black-lists of URLs for each one, and prompt the user for any new URL.
E.g., if a user logs in to foo.com/login.html and stores the password, the
password would auto-fill on foo.com/login.html. If the user goes to
foo.com/login-try-again.html, they would get an alert, and choose whether or
not they want to fill there (with an option to remember)."