Safari tries to fill username

Re:Safari tries to fill username by alistairSH on Friday May 28, 2021 @09:44AM (#27315224)

All sites? Probably not.

Many sites? Probably.

You're assuming people log out reliably or otherwise behave in the most secure way. They don't.

I also don't see how logging out/killing a session after 15 minutes of inactivity is much of a hardship for the user.

[ Parent | on HN ]

Re:Safari tries to fill username by fauigerzigerk on Friday May 28, 2021 @11:02AM (#27316208)

I hate _all_ sites that do this and I actively avoid them. There are many very good reasons why I might not be able to complete a form without interruption. It's not for them second guess me.

And it's not just extremely annoying, it's also completely unnecessary. Just put a "trust this browser" checkbox on the sign-in page and adjust the session timeout accordingly.

[ Parent | on HN ]

Re:Safari tries to fill username by alistairSH on Friday May 28, 2021 @11:28AM (#27316548)

Just put a "trust this browser" checkbox on the sign-in page and adjust the session timeout accordingly.

That works. It defaults to the "safe" behavior, but allows users to self-select into other behavior that they find less objectionable.

FWIW, my end-users are using public computer labs, so we have to build for the worst-case in terms of user security habits.

[ Parent | on HN ]