[srinivasan]

Didn't browsers take a stand a few years ago by ignoring "autocomplete=off" on password fields?

I think it’s about time browsers start ignoring any onpaste events on password fields. I’m curious what Chromium folks think - have there been tickets about this? It would be a great way to end this dumb practice.

[kevincox]

Firefox has the dom.event.clipboardevents.enabled pref which can be used to prevent a lot of web naughtiness however it does break a couple of legitimate use cases.

[aaronmdjones]

Firefox also has signon.storeWhenAutocompleteOff (default true) which ignores such hints.