[imp] Windows XP caches login credentials.

Dan Wilson dan@acucore.com
Thu, 18 Jul 2002 12:34:15 -0600


Quoting Chuck Hagenbuch <chuck@horde.org>:

> Quoting Eric Rostetter <eric.rostetter@physics.utexas.edu>:
> 
> > I think we should consider security above user choice here.  So in general
> > I support adding the tag to login forms.  My only objection is, as someone
> > noted, that it is not xhtml complaint.  But it certainly would help the
> > security rating of Horde/IMP (for those using it in public places, shared
> > web browsers, etc).
> 
> I'm waffling here, as might be obvious. Another option is to turn it off, 
> but add a hotmail-like "Remember me on this computer" option.

I'd think that a "remember me" feature would be even less secure.  At least 
with the autocomplete feature, they have to select their username in order to 
populate the password.

-Dan