<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: arial,helvetica,sans-serif; font-size: 10pt; color: #000000'>I think it's a great feature and Safari has done an excellent job. It's a common use case and this goes a long way to remove the friction of checkout across sites. <br><br>I don't think they require a session password to use a stored card, but arguably they could. Even without, my device/laptop is always at least as secure as my wallet, more so if it's screenlocked. By contrast, my wallet has no password on it. A thief who gets my physical card could use it online and offline. <br><br><br><br><div><span name="x"></span>Javaun Moradi | jmoradi@mozilla.com | IRC: javaun | @javaun<br><span name="x"></span><br></div><br><hr id="zwchr"><div style="color: rgb(0, 0, 0); font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>From: </b>"Mike Hoye" <mhoye@mozilla.com><br><b>To: </b>firefox-dev@mozilla.org<br><b>Sent: </b>Friday, July 11, 2014 4:04:15 PM<br><b>Subject: </b>Re: Credit card auto-completion<br><br>On 2014-07-11 4:02 PM, Rob Campbell wrote:<br>> I actually find that particular one a little creepy. Like, it has my credit card stored somewhere? If someone gets access to my screen, they only need to go to a payment screen somewhere and it'll put in my info?<br>I bet if you dig into your form autocomplete stuff, you'll find that <br>number is already in there somewhere.<br><br>That's certainly surprised me in the past.<br><br>- mhoye<br>_______________________________________________<br>firefox-dev mailing list<br>firefox-dev@mozilla.org<br>https://mail.mozilla.org/listinfo/firefox-dev<br></div><br></div></body></html>