Skip to content

Feature request: fine-grained control for Autofill HTTP Basic Auth #342

@jsachs

Description

@jsachs

Related to #259

We've hard disabled Autofill HTTP Basic Auth within our organization because of the scary things that can happen when credentials are silently submitted to Basic Auth. However, we have a few users with workflows that are dramatically improved by using HTTP Basic Auth. We'd like them to be able to use this feature on these workflows that we've already vetted. It feels like a good way to support this would be adding an option to allow only specific entries to use HTTP Basic Auth autofill.

We can see this working one of two ways, so this issue might also belong in the keepassxc repo. There could be a browser option that requires you to confirm an entry being used for HTTP autofill the first time it is used. There could also be an implementation of this where indivitual entries have a checkbox or support a metadata entry than indicates to the browser that this specific entry is allowed to be used for autofill.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions