Rated 3 out of 5 stars

by gilsa on Dec. 11, 2011 ·

Very good application but there is a substantial problem I encountered (I am not sure whether this is due to a problem in my computer though).
When I first start Firefox, it asks for the Keychain password: no problem there. But once I enter the password Firefox does not ask for it again after I lock the keychain in Keychain Access: I quit and restart Firefox, and the passwords are still available!
(hence: locking the keychain in the system does not affect the application and vice versa: Unlocking the Keychain in FF does not unlock keychain systemwide.)

This review is for a previous version of the add-on (1.1.2.1-signed.1-signed). 

by Julian Fitzell (Developer) on Dec. 11, 2011 ·

...that firefox maintains a cache of passwords it has used, but only for a minute or so. Other than that, the operating system maintains access to the keychain - so when it's locked no application is able to access the passwords. Note, however, that all the data *except* the password (i.e. username and so on) are available even if the keychain is locked.

If Firefox is able to access passwords from a locked keychain after its own cache has expired, that is a serious security problem and should be reported to Apple - I've never seen such behaviour, however.

Cheers!