mnoorenberghe

Google announced on December 9 that this timeline was paused: https://groups.google.com/a/chromium.org/g/chromium-extensio...

The functionality is (mostly) built into Firefox now so there’s little need for a separate app. You can enable native app autofill for both Android and iOS. There are a few things that should still be done to improve the experience but it doesn’t seem like a priority now.

It uses a PRNG with no site-specific seed, it just stores that result temporarily so it can be filled it password confirmation fields or login forms during the same session to ensure the user can complete their password change process. Code: https://searchfox.org/mozilla-central/rev/abcee8d2c97a5c8a1f...

I believe you can right click in any type=password field to bring it up with the heuristics didn’t detect it as a new password field.

Firefox and Safari are continuing to support HTML pages to run the background code in rather than forcing developers to use service workers with no DOM access.

> You can use more than one autocomplete value at a time too. If your username is also an email address you can give the browser and any associated password managers a hint with ‘autocomplete="username email"’.

This whole paragraph is incorrect. While the attribute value does allow multiple tokens there is a very specific syntax defined in the HTML standard and it doesn’t support multiple field names (types) i.e. autocomplete="username email" is invalid. If you access ‘input.autocomplete’ on an input with that attribute value “” will be returned indicating this.

This is incorrect AFAIK. The sync toggle for a data type is for the whole account, not per-device.

Yes, it can now import logins/passwords from Chrome/Chromium on macOS, Windows support already existed for some years.

> Passwords can now be imported from Chrome on macOS in addition to existing support for Windows

https://www.mozilla.org/firefox/70.0/releasenotes/

There are more than 20 different valid field name tokens in the spec, not just “on” and “off”[1]. If web developers actually used the other values correctly then user agents wouldn’t need to use heuristics to figure out the correct data to autofill.

[1] https://html.spec.whatwg.org/multipage/form-control-infrastr...

If you’re suggesting each subscriber gets a static IP then that’s much worse for privacy.

> Now they write this.

This page was written Apr 11, 2011

Are you on macOS or Linux? Passwords can be imported from Chrome/IE/Edge on Windows.

Press reports that this is shipping in Fx69 were incorrect.

Reinstalling Firefox on a Mac is not the same as doing a Firefox Refresh. The former only touches the executable while the latter cleans up cruft in your Firefox data (potentially lingering around from legacy extensions).

The after action report (AAR) can be found at https://wiki.mozilla.org/Identity/Persona_AAR

It's linked right in the article: http://biorxiv.org/content/biorxiv/early/2016/05/26/055699.f...

Actually the page can only be notified when you type a certain message in the address bar and it's limited to ONE message in a browser window so it can't try to watch for a list of strings. When there is a match a new tab will open up so you would notice this if it was being used. This feature was intended for an easter egg so the page could say, for example, "let me know when the user types 'I love Firefox' in the address bar" and then open a tab with an easter egg page. Also note that all tour functionality only applies when the tour tab is selected. Hopefully this clarifies that the page can't really spy on the address bar.

Hello, I'm one of the developers of the tour module on the Firefox team. The whitelist preference adds the whitelisted domains to the permission database when the application is upgrade to today's released (version 29) so changing the preference doesn't change the domains already whitelisted. You can disable the feature using the browser.uitour.enabled if for some reason this feature bothers you. Note that is also requires HTTPS for the whitelist domains too.