To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=103053


User sba changed the following:

                What    |Old value                 |New value
================================================================================
                      CC|'khirano,sba'             |'cd,khirano,sba,tl,tm'
--------------------------------------------------------------------------------
             Assigned to|tm                        |mav
--------------------------------------------------------------------------------
              Issue type|DEFECT                    |ENHANCEMENT
--------------------------------------------------------------------------------
        Target milestone|---                       |OOo 3.x
--------------------------------------------------------------------------------




------- Additional comments from s...@openoffice.org Thu Jun 25 15:39:18 +0000 
2009 -------
My understanding of "normal use" of a password dialog is "Type your pw and while
you can NOT see it (so that someone looking over your shoulder can not read 
it)".

An IME is a help to input non-standard letters (keyboard is too small for all
Japanese or Chinese) - this is acheived by a preview and a UI-supported help tp
choose the right character. 

Putting this together: 
Showing characters of a password while typing it is not OK for security reasons

Conclusion: IME use makes no sense in PW dialogs. Do not use "on-ASCII native
characters.

I believe that Firefox and IE development made some User Experience research. I
believe that following their example makes sense.

I just spoke to CD and he told me that a "general solution" would be "do this
for all edit fields that have the password flag". I.e. when inserting
pw-protected sections in a Wrtiter docxument, or PW dialogs called by API 
(macro).

Since the document PW dialog is the most important one, I suggest to "at least"
change it for this one now nad maybe for the rest "later" (maybe another 
issue?).

Reassigned to MAV.





---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@framework.openoffice.org
For additional commands, e-mail: issues-h...@framework.openoffice.org


---------------------------------------------------------------------
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org

Reply via email to