Re: Saving passwords in 2.28

[Michael Monreal <michael monreal gmail com>]

On Mon, 2009-11-02 at 16:13 +0200, Xan Lopez wrote: 
> In any case most sites
> doing auth with forms should auto-login you through cookies, so the
> impact of this is a lot smaller than what most people imagine when
> they hear about it.

Even if you accept the idea to keep cookies across sessions (which many
users are not willing to do, for a reason) this is only valid for the
lifetime of a cookie. Most Forums and Web mailers limit the cookie to a
few days or weeks at most. So, I really don't think this is only a small
issue...

Cheers,
-Michael