2 ms·
You have a session like normal websites do and ignore the plaintext password in the cookie. Only the login page ever uses the cookie stored password in the rar
by Fatnino 5y ago
You have a session like normal websites do and ignore the plaintext password in the cookie.
Only the login page ever uses the cookie stored password in the rare instance the user got logged out by mistake.
Basically, Lenovo reimplemented a basic browser feature that is supposed to just work locally and made it stupid.
- ptx 5y agoI see, thanks for clarifying. My reply was in reference to the "benefits of using a session over the raw password" and HTTP basic authentication more generally, so if Lenovo are using sessions it doesn't apply in this particular case.