41–50 of 74 posts
I figured not letting your (google especially) browser store personal details was pretty much common privacy/security sense at this point.
That's a misuse for the term "autocomplete" in my opinion. What he complains about is "autofill", not "autocomplete" as I understand it. Autocomplete takes the values you used previously and gives you suggestions for the stuff you're typing in yourself. Autofill tries to guess what values are required and fills them in without additional interactions. They're very different mechanisms...
Fully agree, using "autocomplete" is misleading. The suggestions that go into auto-complete fields come from the server, autofill from the client.
Web devs can recommend input fields not use autocomplete: http://www.w3schools.com/tags/att_input_autocomplete.asp It's considered good practice to use it on login fields, but otherwise depends on whether you think security or user preference should take priority.
Users that find this "good practice" annoying can override it with a bookmarklet or extension: http://kb.mozillazine.org/User_name_and_password_not_remembe...
Also I was a little confused by autocomplete, I thought he meant for the address bar.
Earlier quoted context omitted.
This is true, and actually a pretty smart feature, but you have to take the time to double-check (which I suspect most users won't).
Usually I agree that people will blindly click through, but I don't see people clicking through this[1]. Especially if Safari said it would auto-fill your credit card number and you weren't buying anything? [1] https://www.evernote.com/shard/s356/sh/dcf7867e-eb16-4e0e-83...
Doesn't seem to be an issue in Firefox, as far as I can tell. Certainly didn't fill any other fields for me.
Web devs can recommend input fields not use autocomplete: http://www.w3schools.com/tags/att_input_autocomplete.asp It's considered good practice to use it on login fields, but otherwise depends on whether you think security or user preference should take priority.
An attacker that can make use of an auto-completing password field has got enough access to mean that the game is over anyway - they can get that password from a variety of other sources on the machine. Turning off autocomplete on login fields doesn't make that form more secure, and it does annoy users. As kalleboo says, it probably reduces security as your users change to easy to type passwords, or keep needing pass…