password autocomplete

[Russell Beall]

Hi,

I am researching the use of password autocomplete on the shibboleth login page and I wonder what are the best practices and recommendations in the community.  

Do people generally disable it (or would like to if they knew how) or leave it enabled?

I note that the default login.jsp in the installer does not use the form flag, perhaps because it is "nonstandard".  By this I am referring to the attribute of the HTML form element: autocomplete="off".

In searching the shibboleth-users archive I see no mention of the term "autocomplete" anywhere, though I would be surprised if it hasn't been discussed at some point…

Thanks,
Russ.