RE: html and password management

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



From: Andrew Ballard 
> On Thu, Jun 4, 2009 at 12:33 PM, Michael A. Peters <mpeters@xxxxxxx>
wrote:
>> Andrew Ballard wrote:
>>
>>>
>>>
>>> I just thought I'd toss this out there. Do you know that there is an
>>> effort to remove browser support this attribute (or at least give
the
>>> user a browser configuration option to ignore it)?
>>>
>>> http://article.gmane.org/gmane.org.w3c.whatwg.discuss/3054
>>>
>>> This article discusses some of the issues involved.
>>>
>>>
https://wiki.mozilla.org/The_autocomplete_attribute_and_web_documents_us
ing_XHTML
>>
>> That page says:
>>
>> "When writing HTML, such authors should declare and validate against
a
>> custom doctype including the autocomplete attribute (example HTML
document).
>>
>> However, there is currently no way to trigger the same user agent
>> functionality with an attribute in XHTML. This constitutes an
unnecessary
>> obstacle to the adoption of XML-based markup."
>>
>> That page is wrong.
>> It took me 10 minutes in google to find a way to do it in xhtml and
have the
>> xhtml validate. And I didn't have to use a custom DTD. Only thing I
had to
>> do is send the application/xhtml+xml header - which I already send,
as
>> that's the proper way to serve xhtml 1.1.
>>
> I wasn't really taking a position on the issue. I just thought it
> worth noting that there seems to be a contingent that wants to remove
> the attribute. From what I read, they have already conceded to
> language that says a user-agent may choose to implement it, but is not
> required to do so.

There is nothing to remove. It is a proprietary extension and not likely
to ever be accepted as part of the W3C standards. As such, it won't be
in any W3C DTD, but will always require a custom DTD be supplied
locally. Each browser supplier must decide whether to support it or
leave it out.

>From my viewpoint, the bigger need is to educate administrators of
publicly available computers to disable autocomplete in the browser
configuration. If they would do that, when you go to the workstation in
the library, you can't see the credentials of the last user, and the
next user won't be able to retrieve yours.

Bob McConnell

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux