-
-
Notifications
You must be signed in to change notification settings - Fork 216
Feature request: fine-grained control for Autofill HTTP Basic Auth #342
Description
Related to #259
We've hard disabled Autofill HTTP Basic Auth within our organization because of the scary things that can happen when credentials are silently submitted to Basic Auth. However, we have a few users with workflows that are dramatically improved by using HTTP Basic Auth. We'd like them to be able to use this feature on these workflows that we've already vetted. It feels like a good way to support this would be adding an option to allow only specific entries to use HTTP Basic Auth autofill.
We can see this working one of two ways, so this issue might also belong in the keepassxc repo. There could be a browser option that requires you to confirm an entry being used for HTTP autofill the first time it is used. There could also be an implementation of this where indivitual entries have a checkbox or support a metadata entry than indicates to the browser that this specific entry is allowed to be used for autofill.