To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=103053
User sba changed the following: What |Old value |New value ================================================================================ CC|'khirano,sba' |'cd,khirano,sba,tl,tm' -------------------------------------------------------------------------------- Assigned to|tm |mav -------------------------------------------------------------------------------- Issue type|DEFECT |ENHANCEMENT -------------------------------------------------------------------------------- Target milestone|--- |OOo 3.x -------------------------------------------------------------------------------- ------- Additional comments from s...@openoffice.org Thu Jun 25 15:39:18 +0000 2009 ------- My understanding of "normal use" of a password dialog is "Type your pw and while you can NOT see it (so that someone looking over your shoulder can not read it)". An IME is a help to input non-standard letters (keyboard is too small for all Japanese or Chinese) - this is acheived by a preview and a UI-supported help tp choose the right character. Putting this together: Showing characters of a password while typing it is not OK for security reasons Conclusion: IME use makes no sense in PW dialogs. Do not use "on-ASCII native characters. I believe that Firefox and IE development made some User Experience research. I believe that following their example makes sense. I just spoke to CD and he told me that a "general solution" would be "do this for all edit fields that have the password flag". I.e. when inserting pw-protected sections in a Wrtiter docxument, or PW dialogs called by API (macro). Since the document PW dialog is the most important one, I suggest to "at least" change it for this one now nad maybe for the rest "later" (maybe another issue?). Reassigned to MAV. --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@framework.openoffice.org For additional commands, e-mail: issues-h...@framework.openoffice.org --------------------------------------------------------------------- To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org