Why key4.db isn't encrypted?!

Firefox Development
,
#1

Why key4.db isn’t encrypted?!?!
It’s a sensitive file which can be used to get all saved logins, without logging into the OS.
It’s rare for users to make it safe using Primary Password capability in Firefox Settings. also when Primary Password is set, the performance drops specifically.

I offer using Operating System Keyring Service (ex. DPAPI in Windows). Google Chrome has implemented this feature. So Chrome have a safer password manager.

#2

Thank you !!! I am a current victim

#3

This forum isn’t very active and posting here isn’t a good way to reach the developers.

Two ways to make suggestions to Mozilla:
• Suggest the idea with Mozilla Connect. https://connect.mozilla.org/
• Report the issue in Bugzilla. https://bugzilla.mozilla.org/home

There are also more active discussion rooms on the Matrix. https://wiki.mozilla.org/Matrix