@rezaalmanda This is a delicate matter here, we are privacy first software, and autofill is anything but privacy preserving, while it does offer some user convince, in terms of not having to copy paste passwords around it also opens a lot of attack vectors.
The reason it was created as a thing was the initial attack vector of listening to the shared clipboard between applications. So in theory if you have a compromised device than you can listen to the clipboard when the user uses a password and steal it.
However, you can also be reading the memory constantly and if you use autofill you can extract the same data of autofill as well, so in that sense the security benefit compared to clipboard alternative is close to none.
However it does unlock lot more attack vectors, for example if you're on a compromised or malicious app it can request more than a single password or email from the manager and steal that data, it can in the case we offer autofill for other stuff like phone numbers, emails, usernames, addresses request those with the password request as well even if they are not on the login form.
In most malicious cases without a compromised device it's a good tool to extract personal information for web pages.
I do think that if we are to be true libre software, we are to preserve the identity of our users as much as possible and sharing their data over third party apis to fill them in an a field that might request more than what it's on the screen is a violation of that privacy. I would vote against, that feature myself as on systems like apple we don't even have access to the source underneath to verify it's doing what we are saying it's doing.
We might lose some potential users of our app, but for me we should stand behind our promises to deliver libre first software instead of a shiny star.
We offer FIDO2 as a login alternative, if people are concerned with their safety, they shouldn't be using a password that can be hijacked anyway, they should be just exchanging certificate challenges.
@rezaalmanda This is a delicate matter here, we are privacy first software, and autofill is anything but privacy preserving, while it does offer some user convince, in terms of not having to copy paste passwords around it also opens a lot of attack vectors.
The reason it was created as a thing was the initial attack vector of listening to the shared clipboard between applications. So in theory if you have a compromised device than you can listen to the clipboard when the user uses a password and steal it.
However, you can also be reading the memory constantly and if you use autofill you can extract the same data of autofill as well, so in that sense the security benefit compared to clipboard alternative is close to none.
However it does unlock lot more attack vectors, for example if you're on a compromised or malicious app it can request more than a single password or email from the manager and steal that data, it can in the case we offer autofill for other stuff like phone numbers, emails, usernames, addresses request those with the password request as well even if they are not on the login form.
In most malicious cases without a compromised device it's a good tool to extract personal information for web pages.
I do think that if we are to be true libre software, we are to preserve the identity of our users as much as possible and sharing their data over third party apis to fill them in an a field that might request more than what it's on the screen is a violation of that privacy. I would vote against, that feature myself as on systems like apple we don't even have access to the source underneath to verify it's doing what we are saying it's doing.
We might lose some potential users of our app, but for me we should stand behind our promises to deliver libre first software instead of a shiny star.
We offer FIDO2 as a login alternative, if people are concerned with their safety, they shouldn't be using a password that can be hijacked anyway, they should be just exchanging certificate challenges.