Saving password on insecure site

[ludwigvonmises]

Hello,

I've just started using Vivaldi and it's great. One thing I've noticed is that (if I am not mistaken) it doesn't allow saving password for sites with self-signed or otherwise unverifiable certificate. Is there a way to force saving password for those sites?

[DoctorG]

@ludwigvonmises

Saving password on insecure site

You can not do this. As i remember that was a security restriction not to save passwords sent over non-SSL connections.

[ludwigvonmises]

@DoctorG This is the one thing I miss from Firefox. I see no reason not to allow saving passwords on private IP ranges and .local TLDs. I guess I'll put in a feature request.

[Pathduck]

@ludwigvonmises I have a router running at:
https://router.asus.com:8443
with a self-signed certificate, and Vivaldi prompt me for saving passwords.

I also run a local Nginx with some basic test pages, and Vivaldi prompts me for saving at both:
http://127.0.0.1/
http://localhost/

There is also a flag:
vivaldi://flags/#unsafely-treat-insecure-origin-as-secure
I have not set it though and not sure if it works.

[ludwigvonmises]

@Pathduck Hm, I might have some other problem then. I've tried the flag you mention, didn't help. Thanks for the info.

[Pathduck]

@ludwigvonmises

There's another flag as well:
chrome://flags/#add-passwords-in-settings
This will allow you to manually add credentials in the Chromium settings page chrome://settings/passwords

But it's very finnicky about what URLs it accepts, it won't do just http://localhost , you'll need to add a full URL. But it does accept http://127.0.01 though for some reason.

I guess these flags are for local development use, they are not meant for corporate networks where there's often completely different ways for users to authenticate (Kerberos, NTLM++)

[DoctorG]

@Pathduck Oh, yes, i used it 1-2 years ago, but forgot about it.

[ludwigvonmises]

It works for http sites, but for https I have to import CA certificate into the browser. Otherwise, it just won't work, even if saved password exists. A tedious step which is not necessary on Firefox. Hopefully this will improve in some future version.

[DoctorG]

@ludwigvonmises said in Saving password on insecure site:

Hopefully this will improve in some future version.

Planned.

[ludwigvonmises]

@DoctorG That's great. So far, this is the only complaint I have against this near-perfect browser.

[Eggcorn]

@ludwigvonmises I'd suggest password management software such as 1Password, in any case. But yes, it's a problem if the Vivaldi password filler doesn't work on intranet (as opposed to internet) sites.

[DoctorG]

I use KeepassXC or Keepass2 as external password management to get rid of such problems.

[patrickweiden]

@DoctorG said in Saving password on insecure site:

@ludwigvonmises said in Saving password on insecure site:

Hopefully this will improve in some future version.

Planned.

@DoctorG: What does your "Planned" mean here? Can you say what exactly will be the improvement / what the plan is? (If Vivaldi was able to allow users to save passwords for insecure sites / on a user-question basis, so would be soooooo great!)