{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/webappsec/issues/445","labels_url":"https://api.github.com/repos/w3c/webappsec/issues/445/labels{/name}","comments_url":"https://api.github.com/repos/w3c/webappsec/issues/445/comments","events_url":"https://api.github.com/repos/w3c/webappsec/issues/445/events","html_url":"https://github.com/w3c/webappsec/issues/445","id":99052206,"number":445,"title":"CREDENTIAL: requestAutocomplete can already provide local credentials","user":{"login":"mnoorenberghe","id":601139,"avatar_url":"https://avatars.githubusercontent.com/u/601139?v=3","gravatar_id":"","url":"https://api.github.com/users/mnoorenberghe","html_url":"https://github.com/mnoorenberghe","followers_url":"https://api.github.com/users/mnoorenberghe/followers","following_url":"https://api.github.com/users/mnoorenberghe/following{/other_user}","gists_url":"https://api.github.com/users/mnoorenberghe/gists{/gist_id}","starred_url":"https://api.github.com/users/mnoorenberghe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mnoorenberghe/subscriptions","organizations_url":"https://api.github.com/users/mnoorenberghe/orgs","repos_url":"https://api.github.com/users/mnoorenberghe/repos","events_url":"https://api.github.com/users/mnoorenberghe/events{/privacy}","received_events_url":"https://api.github.com/users/mnoorenberghe/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/w3c/webappsec/labels/CREDENTIAL","name":"CREDENTIAL","color":"009800"}],"state":"closed","locked":false,"assignee":{"login":"mikewest","id":1497,"avatar_url":"https://avatars.githubusercontent.com/u/1497?v=3","gravatar_id":"","url":"https://api.github.com/users/mikewest","html_url":"https://github.com/mikewest","followers_url":"https://api.github.com/users/mikewest/followers","following_url":"https://api.github.com/users/mikewest/following{/other_user}","gists_url":"https://api.github.com/users/mikewest/gists{/gist_id}","starred_url":"https://api.github.com/users/mikewest/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikewest/subscriptions","organizations_url":"https://api.github.com/users/mikewest/orgs","repos_url":"https://api.github.com/users/mikewest/repos","events_url":"https://api.github.com/users/mikewest/events{/privacy}","received_events_url":"https://api.github.com/users/mikewest/received_events","type":"User","site_admin":false},"milestone":null,"comments":9,"created_at":"2015-08-04T20:15:14Z","updated_at":"2015-10-08T10:53:19Z","closed_at":"2015-10-08T10:53:19Z","body":"The LocallyStoredCredential aspect of the spec duplicates functionality provided by requestAutocomplete with autocomplete=\"(username/new-password/current-password)\" and doesn't seem to be adding enough value to justify having duplicate UI. As an implementer of a password manager and requestAutocomplete, I don't want to have to maintain separate UI for these two specs as there is significant overlap and I believe the differences/inconsistency could confuse users.\r\n\r\nI also think the user experience is much better building local credential support on top of requestAutocomplete (rAc) as it can fill complete forms with one button click and already has a good fallback story for browsers that don't support it where they simply show the <form> they already created. Browsers can already indicate if they can't support rAc for some fields in the form. Being able to complete a whole registration form (e.g. Name, Email, Address, Username, & Password) with one rAc dialog would be much better than having to use rAc followed/preceded by a separate credential management API call and UI.\r\n\r\nI propose that the local credential support be specified atop the existing requestAutocomplete specification instead of a standalone spec. I haven't looked at the federated credential aspects recently to know if they could also be easily mapped into rAc but I suspect they could using new `autocomplete` values and `<input type=\"hidden\">`."},"comment":{"url":"https://api.github.com/repos/w3c/webappsec/issues/comments/146502167","html_url":"https://github.com/w3c/webappsec/issues/445#issuecomment-146502167","issue_url":"https://api.github.com/repos/w3c/webappsec/issues/445","id":146502167,"user":{"login":"mikewest","id":1497,"avatar_url":"https://avatars.githubusercontent.com/u/1497?v=3","gravatar_id":"","url":"https://api.github.com/users/mikewest","html_url":"https://github.com/mikewest","followers_url":"https://api.github.com/users/mikewest/followers","following_url":"https://api.github.com/users/mikewest/following{/other_user}","gists_url":"https://api.github.com/users/mikewest/gists{/gist_id}","starred_url":"https://api.github.com/users/mikewest/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikewest/subscriptions","organizations_url":"https://api.github.com/users/mikewest/orgs","repos_url":"https://api.github.com/users/mikewest/repos","events_url":"https://api.github.com/users/mikewest/events{/privacy}","received_events_url":"https://api.github.com/users/mikewest/received_events","type":"User","site_admin":false},"created_at":"2015-10-08T10:53:18Z","updated_at":"2015-10-08T10:53:18Z","body":"This issue was moved to w3c/webappsec-credential-management#2"}}