password autocomplete

[caleb racey]

We are contemplating turning autocomplete on after 5 years of running with it off.

The advent of mobile use with it's awkward input of special characters (we recommend their use in passwords) and student's dissatisfaction with having to type their password are factors here.

We haven't made a decision yet but are getting increasing calls for password autocomplete to be turned on.


Cal

Caleb Racey
Systems architecture manager
ISS
Newcastle University
UK




>-----Original Message-----
>From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
>On Behalf Of Russell Beall
>Sent: 12 March 2012 9:23 PM
>To: Shib Users
>Subject: password autocomplete
>
>Hi,
>
>I am researching the use of password autocomplete on the shibboleth
>login page and I wonder what are the best practices and recommendations
>in the community.
>
>Do people generally disable it (or would like to if they knew how) or
>leave it enabled?
>
>I note that the default login.jsp in the installer does not use the form
>flag, perhaps because it is "nonstandard".  By this I am referring to
>the attribute of the HTML form element: autocomplete="off".
>
>In searching the shibboleth-users archive I see no mention of the term
>"autocomplete" anywhere, though I would be surprised if it hasn't been
>discussed at some point...
>
>Thanks,
>Russ.
>
>--
>To unsubscribe from this list send an email to users-
>unsubscribe at shibboleth.net