<html><head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head><body style="font-family: Century Gothic; font-size: 10pt;"
bgcolor="#FFFFFF" text="#000000"><div style="font-size:
10pt;font-family: Century Gothic;"><span style="font-family: Century
Gothic;">Hi Peter,<br><br>Before deciding whether to file a bug, please
take a look at this: <a class="moz-txt-link-freetext" href="https://wiki.mozilla.org/WebExtensions/NewAPIs">https://wiki.mozilla.org/WebExtensions/NewAPIs</a><br></span><br>This
will help us avoid duplicates and speed up the triage process--thanks!<br><br>Amy<br><blockquote
style="border: 0px none;"
cite="mid:CAGoYUJtaN_njW5DU-_jCsbjqkdeq1fWYak4mjGt2cY8OJfbU=A@mail.gmail.com"
type="cite"><div style="margin:30px 25px 10px 25px;" class="__pbConvHr"><div
style="display:table;width:100%;border-top:1px solid
#EDEEF0;padding-top:5px"> <div
style="display:table-cell;vertical-align:middle;padding-right:6px;"><img
photoaddress="bsilverberg@mozilla.com" photoname="Bob Silverberg"
src="cid:part1.02030909.05050204@mozilla.com" name="postbox-contact.jpg"
height="25px" width="25px"></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;width:100%">
<a moz-do-not-send="true" href="mailto:bsilverberg@mozilla.com"
style="color:#737F92
!important;padding-right:6px;font-weight:bold;text-decoration:none
!important;">Bob Silverberg</a></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;">
<font color="#9FA2A5"><span style="padding-left:6px">August 1, 2017 at
8:45 AM</span></font></div></div></div><div
style="color:#888888;margin-left:24px;margin-right:24px;"
__pbrmquotes="true" class="__pbConvBody"><div dir="ltr"><br><div
class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 1, 2017 at
8:57 AM, <span dir="ltr"><<a moz-do-not-send="true" target="_blank"
href="mailto:grinapo+mozilladev@gmail.com">grinapo+mozilladev@gmail.com</a>></span>
wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px
solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><br>
Which API is supposed to:<br>
- expire the master password?<br></blockquote><div><br></div><div>Nothing
exists or is currently planned for this.</div><div> <br></div><blockquote
style="margin:0px 0px 0px 0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex" class="gmail_quote">
- expire http auth password?<br></blockquote><div><br></div><div>I am
fairly sure that nothing exists or is currently planned for this either.</div><div><br></div><blockquote
style="margin:0px 0px 0px 0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex" class="gmail_quote">
- manipulate the password database?<br>
<br></blockquote><div><br></div><div>A logins API [1] is in the pipeline
and is undergoing a security review.</div><div><br></div><div>For the
ones that are not currently planned, I would suggest opening bugs
detailing exactly what you feel you need from an API, and providing use
cases for any APIs you are requesting.</div><div><br></div><div>Thanks,</div><div>Bob</div><div><br></div><div>[1]
<a moz-do-not-send="true"
href="https://bugzilla.mozilla.org/show_bug.cgi?id=1324919">https://bugzilla.mozilla.org/show_bug.cgi?id=1324919</a><br></div><br></div></div></div>
<pre wrap="">_______________________________________________
Dev-addons mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Dev-addons@mozilla.org">Dev-addons@mozilla.org</a>
<a class="moz-txt-link-freetext" href="https://mail.mozilla.org/listinfo/dev-addons">https://mail.mozilla.org/listinfo/dev-addons</a>
</pre></div><div style="margin:30px 25px 10px 25px;" class="__pbConvHr"><div
style="display:table;width:100%;border-top:1px solid
#EDEEF0;padding-top:5px"> <div
style="display:table-cell;vertical-align:middle;padding-right:6px;"><img
photoaddress="grinapo+mozilladev@gmail.com" photoname=""
src="cid:part2.07050209.09040306@mozilla.com"
name="compose-unknown-contact.jpg" height="25px" width="25px"></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;width:100%">
<a moz-do-not-send="true" href="mailto:grinapo+mozilladev@gmail.com"
style="color:#737F92
!important;padding-right:6px;font-weight:bold;text-decoration:none
!important;">grinapo+mozilladev@gmail.com</a></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;">
<font color="#9FA2A5"><span style="padding-left:6px">August 1, 2017 at
5:57 AM</span></font></div></div></div><div
style="color:#888888;margin-left:24px;margin-right:24px;"
__pbrmquotes="true" class="__pbConvBody"><div>Hello,<br><br>There are
some addons for a master password timeout feature (which, in<br>turn,
seems to be an obviously compulsory feature, but that's for<br>another
day), which has been killed as most of the useful addons around<br>("not
multiprocess compatible", "LEGACY").<br><br>I checked the code and
it's, like, 1 line:<br><br>
Components.classes["@mozilla.org/security/pk11tokendb;1"]<br>
.getService(Components.interfaces.nsIPK11TokenDB)<br>
.findTokenByName("").logoutAndDropAuthenticatedResources();<br><br>I'm
no addon dev, so I have tried to search for anything password<br>related
(being curious about the future of Saved Passwords Editor addon<br>as
well), but unfortunately found nothing.<br><br>Your experience and
wisdom is required.<br><br>Which API is supposed to:<br>- expire the
master password?<br>- expire http auth password?<br>- manipulate the
password database?<br><br>(Please refrain from telling me to use
something else, unless you back<br>it up by real security-related facts,
I mean those who insist MP is<br>insecure but fail to detail how, apart
from their personal taste. The<br>question is about solving a problem,
not avoiding it.)<br><br>Thanks,<br>Peter<br>_______________________________________________<br>Dev-addons
mailing list<br><a class="moz-txt-link-abbreviated" href="mailto:Dev-addons@mozilla.org">Dev-addons@mozilla.org</a><br><a class="moz-txt-link-freetext" href="https://mail.mozilla.org/listinfo/dev-addons">https://mail.mozilla.org/listinfo/dev-addons</a><br></div></div></blockquote></div></body></html>