Safari tries to fill username

Re:Safari tries to fill username by cactus2093 on Friday May 28, 2021 @08:44AM (#27314716)

But should all sites really be optimized for the user at a public library computer? At the expense of convenience for the large majority of users that are on a personal or work computer? Doesn’t make much sense to me.

Also the computer itself solves this problem for you in many cases, a guest profile typically deletes all browser session info when you log out.

[ Parent | on HN ]

Re:Safari tries to fill username by alistairSH on Friday May 28, 2021 @09:44AM (#27315224)

All sites? Probably not.

Many sites? Probably.

You're assuming people log out reliably or otherwise behave in the most secure way. They don't.

I also don't see how logging out/killing a session after 15 minutes of inactivity is much of a hardship for the user.

[ Parent | on HN ]

Re:Safari tries to fill username by fauigerzigerk on Friday May 28, 2021 @11:02AM (#27316208)

I hate _all_ sites that do this and I actively avoid them. There are many very good reasons why I might not be able to complete a form without interruption. It's not for them second guess me.

And it's not just extremely annoying, it's also completely unnecessary. Just put a "trust this browser" checkbox on the sign-in page and adjust the session timeout accordingly.

[ Parent | on HN ]

Re:Safari tries to fill username by alistairSH on Friday May 28, 2021 @11:28AM (#27316548)

Just put a "trust this browser" checkbox on the sign-in page and adjust the session timeout accordingly.

That works. It defaults to the "safe" behavior, but allows users to self-select into other behavior that they find less objectionable.

FWIW, my end-users are using public computer labs, so we have to build for the worst-case in terms of user security habits.

[ Parent | on HN ]