New issue
Advanced search Search tips

Issue 688255 link

Starred by 1 user
Status: WontFix
Owner: ----
Closed: Feb 2017
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug



Sign in to add a comment

Chrome doesn't save password

Reported by szymk...@gmail.com, Feb 3 2017 
UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.95 Safari/537.36

Steps to reproduce the problem:
1. go to https://codelab3.turingscraft.com/codelab/jsp/login1.jsp
2. type in log-in information

What is the expected behavior?
Expect chrome to try to save the user and password

What went wrong?
Chrome does not offer to save the password for the site nor does it try to autocomplete at all

Did this work before? No 

Chrome version: 55.0.2883.95  Channel: n/a
OS Version: OS X 10.12.3
Flash Version: Shockwave Flash 24.0 r0

Comment 1 by ellyjo...@chromium.org, Feb 3 2017

Status: WontFix (was: Unconfirmed)
Thanks for your report.

The linked page actually has HTTPS considered broken by Chrome: the cert has a SHA1 signature with an expiration date in 2017. See https://security.googleblog.com/2015/12/an-update-on-sha-1-certificates-in.html for details about this.

I'm fairly sure we do not autofill or offer to save passwords on sites with broken HTTPS, because if we did an attacker could cause us to overwrite user credentials or (worse) leak user credentials, so in this case Chrome is behaving as intended and this is WontFix.
►

Sign in to add a comment