Password fields should be type="password" about nzbget HOT 8 CLOSED

Just created PR #260 for this.

from nzbget.

In my opinion it's better to have password fields plain because that makes it easier to control the settings.
On the other side I understand your concerns.

Suggestion: show passwords masked by default but provide a way to show them as plain text. Two alternatives:

1. button "Show" near each password field;
2. option "Show passwords" in menu "View" on settings. That menu currently have only one option "Compact mode".

I'm adding label "help wanted" to this issue. Contributions are welcome.

from nzbget.

+1 for type="password"

from nzbget.

+1 for type=password and a checkbox for "Show Passwords"

from nzbget.

Is this just for managing Usenet servers? Does it apply at all to NZB download passwords?

from nzbget.

It's not for nzb-passwords.

from nzbget.

What is the problem that you are trying to solve? If the problem is someone looking over your shoulder, the masking or hiding the password with an option to reveal would be suitable. If the problem is a proxy or "man in the middle" inspecting your unencrypted traffic, the only secure option would be to remove the feature that shows a stored password. The password field would be one way, to set or update a password.

from nzbget.

Well +1 as it helps with password managers. ;)

Should also help with screen readers like jaws to recognize it's a password field.

Speaking of... Anyone ever test NzbGet with screen readers. Just because your blind, should not mean you can't use NzbGet.

from nzbget.