<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<i></i>
<div class="moz-cite-prefix">I have been listening to people purport
that having a password on startup offers some sort of security
benefit for as long as I have been associated with Thunderbird. I
have seen more than one add-on used to try and enforce such a
regime, and listened to the spurious complaints about how security
has now been broken because mail is displayed now even with a
master password set. The fact two escape presses bypassed a master
password prompt appears to be lost on almost everyone.<br>
<br>
For the life of me I can not understand what benefit this offers.
All I see is a group of people that want user software to start
offering features they are reluctant to use in their operating
systems. (user authentication and password protected screen
savers.) They want this replaced with a box that asks a password.
Nothing else, just a password that stops the program loading.
No data encryption, no password required to return from say a
blanked screen, just a startup password that does nothing, except
slow startup.<br>
<br>
This is a "feature" that has <a moz-do-not-send="true"
href="https://bugzilla.mozilla.org/show_bug.cgi?id=16489">been
in bugzilla</a> for over 20 years and a decision was made 9
years ago that it would not be implemented. Yet here we are still
listening to folks suggesting if users needs were being met it
would be in the product. I think to implement this, would be
irresponsible. <br>
<br>
Matt<br>
<br>
<br>
<br>
On 08-Mar-20 3:28 AM, Jacques Angevelle wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20aa318d-7ea7-b9bc-213e-2607b036452e@free.fr">
<pre class="moz-quote-pre" wrap="">+1
I think a good estimate of non covered needs is a statistic showing
number and percent of out of date add-ons if every user move to TB 68+.
I think some of these disabled add-ons like "ask master password at
start-up" should be easily integrated in core with security benefit.
Other are "comfort" add-ons so, global statistic isn't enough.
Functionality review needs also to be done.
Jacques
</pre>
</blockquote>
<br>
</body>
</html>