<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Russel,<br>
    <br>
    I added to my login page because I was concerned about labs and open
    pcs.  If you start typing you username on the login page is gives
    you login id of a previous user.  <br>
    <br>
    &lt;form action="&lt;%=request.getAttribute("actionUrl")%&gt;"
    method="post" autocomplete="off"&gt;<br>
    <br>
    -Chris<br>
    <br>
    On 3/12/12 5:23 PM, Russell Beall wrote:
    <blockquote cite="mid:1BFFE796-1F6D-48A5-8141-17688A1FB1B2@usc.edu"
      type="cite">
      <pre wrap="">Hi,

I am researching the use of password autocomplete on the shibboleth login page and I wonder what are the best practices and recommendations in the community.  

Do people generally disable it (or would like to if they knew how) or leave it enabled?

I note that the default login.jsp in the installer does not use the form flag, perhaps because it is "nonstandard".  By this I am referring to the attribute of the HTML form element: autocomplete="off".

In searching the shibboleth-users archive I see no mention of the term "autocomplete" anywhere, though I would be surprised if it hasn't been discussed at some point…

Thanks,
Russ.

--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre>
    </blockquote>
    <br>
    <br>
    <div class="moz-signature">-- <br>
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <title>OIRT Signature</title>
      <style media="all" type="text/css">
        #sig{
                margin:6px 0 0 15px;
                padding:6px;
                width: 530px;
                }
        #sig .person{
                font-family:Georgia, "Times New Roman", Times, serif;
                font-size:12px;
                font-style:italic;
                color:#333333;
                font-weight: bolder;
                padding: 0 0 0 15px;
        }
                #sig .title{
                font-family:Georgia, "Times New Roman", Times, serif;
                font-size:10px;
                font-style:italic;
                color:#333333;
                padding: 0 0 0 15px;
                letter-spacing: .1em;
                line-height: 10px;
        }

        #sig .row {
                line-height:12px;
                color:#333333;
                padding-top: 13px;
                padding: 10px 0 0 15px;
                font-family: Verdana, Arial, Helvetica, sans-serif;
                font-size: 10px;
        }
        #sig .top {
                font-family:Georgia, "Times New Roman", Times, serif;
                font-size:11px;
                font-style:italic;
                color:#CC0000;
                padding:7px 0 0 0;
                font-weight: bolder;
        }
        #sig .toptwo {
                font-family:Georgia, "Times New Roman", Times, serif;
                font-size:11px;
                font-style:italic;
                color:#CC0000;
                padding-left: 120px;
                font-weight: bolder;
        }

        #sig .row a:link, .row avisited {
                color:#5CBDBF;
                text-decoration:none;
                }
        #sig .row a:over{
                color:#333333;
                border: 1px black dotted;
        }

</style>
      <div id="sig">
        <table border="0" cellpadding="0" cellspacing="0" width="100%">
          <tbody>
            <tr>
              <td valign="top" width="150"><img moz-do-not-send="false"
                  src="cid:part1.06060403.01040306@fdu.edu" alt="fdu
                  logo" height="62" width="140"></td>
              <td>
                <div class="person">Christopher Bland</div>
                <div class="title">Systems Manager<br>
                  Information Systems and Technology</div>
                <div class="row"> <strong>1000 River Road, Teaneck NJ
                    07666</strong><br>
                  Mail Stop: T-BH1-01<br>
                  <img moz-do-not-send="false"
                    src="cid:part2.02000109.05040301@fdu.edu"
                    alt="phone" height="10" width="13">: 201-692-2414 |
                  <img moz-do-not-send="false"
                    src="cid:part3.04000609.07030807@fdu.edu" alt="fax"
                    height="13" width="15">: 201-692-2494 | <img
                    moz-do-not-send="false"
                    src="cid:part4.08090603.03060800@fdu.edu"
                    alt="email" height="11" width="12">: <a
                    href="mailto:chris@fdu.edu">chris@fdu.edu</a> </div>
              </td>
            </tr>
            <tr>
              <td colspan="2">
                <div class="top">"Fairleigh Dickinson University will
                  never<br>
                                                   ask for your
                  password. Please do not share it with others!"</div>
              </td>
            </tr>
          </tbody>
        </table>
      </div>
    </div>
  </body>
</html>