When unlocking keyrings, seahorse should remember choice for "Automatically unlock this keyring"

Bug #1731757 reported by Andreas E.
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
seahorse (Ubuntu)
New
Undecided
Unassigned

Bug Description

As a user, I want to keep some specific secrets under special protection, i.e. only manually unlocked on demand and not at login.
Everytime that I manually unlock a keyring, the password dialog contains a preselected checkbox "Automatically unlock this keyring whenever I'm logged in". To preserve the status quo (keyring not automatically unlocked) there is always user interaction required to uncheck the checkbox. In other words, seahorse defaults to reduce the level of security.

Expected behavior:

- The checkbox should not be preselected.
    Rationale:
    1. While there might exist cases where a user later wants configure a keyring to unlock automatically, this is rather a rare case. It causes much less effort to check the checkbox when you really want to instead of unchecking it every time.
    2. This is very very prone to user error. Here, user error affects security.
    3. Once the checkbox is checked, this cannot easily be reverted because the password dialog won't appear anymore.

- (Maybe) The checkbox should be completely removed.
    See justification in https://bugzilla.gnome.org/show_bug.cgi?id=576676 (planned to be included 8 years ago)

I just found this bug has been reported and discussed upstream 3.5 years ago with a patch submitted that has neither been released nor even reviewed. Now in the 4th subsequent Ubuntu release users can still not benefit from it. Apart from the bug itself, the kind of upstream bug-handling is very disappointing for an app that is at the core of the OS security.
See: https://bugzilla.gnome.org/show_bug.cgi?id=725641

Version: seahorse 3.20.0-3.1
System: Ubuntu 17.10 Gnome Shell

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.