[Pro] Securing a Password Field

Is there a way to eliminate completely the ability of a browser to cache the contents of a particular field? In this case I am thinking of a password field on a secure site. I notice that auto fill is blocked in the password field of financial institutions.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

You can disable the autofill behavior on any text input field using
the Extended dialog. Note that this will invalidate the page, because
the autofill attribute is not standard HTML of any level.

Click once on the input field (password or username). Open the Item /
Extended dialog, and make sure the Input tab is active. Click New, and
in the sub-dialog, enter

autocomplete
off

in the name and value fields, respectively.

Okay out of the stack of dialogs, repeat for each field you wish to
disable, and publish. Note that Google Toolbar has (had? didn’t look
to see if it was resolved yet) an open but where this will not be
enough to keep that add-on from filling it in anyway.

Walter

On May 14, 2011, at 10:11 AM, Larry Hicok wrote:

Is there a way to eliminate completely the ability of a browser to
cache the contents of a particular field? In this case I am thinking
of a password field on a secure site. I notice that auto fill is
blocked in the password field of financial institutions.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Thanks.

Will you please explain: “this will invalidate the page.”

I am also confused re: Google Toolbar. Are you saying that this will not stop it from autofilling the password field?

Thanks for your patience.

Larry


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

If you go to the W3C Validator and run your page against it, the
validation will fail with an error to the effect of “autocomplete is
something Microsoft made up, and even if all modern browsers
understand it, we refuse to acknowledge its existence on general
principles”.

When looking up the exact name of the attribute in Google before
posting here, I noticed that there was someone on Google Toolbar’s bug
reporting system (which was a very high result for the query) using
their caps lock a lot to express their displeasure about this.
Apparently, if there’s even a hint of a Name or E-mail or Password
(even if it’s not a label for the field or if the field is named
something else) the Google Toolbar will get all helpful and fill it in
anyway. I didn’t look far enough through the thread to see if it’s
been fixed since then, but I thought I would point it out since it was
news to me.

Walter

On May 14, 2011, at 12:21 PM, Larry Hicok wrote:

Thanks.

Will you please explain: “this will invalidate the page.”

I am also confused re: Google Toolbar. Are you saying that this will
not stop it from autofilling the password field?

Thanks for your patience.

Larry


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options