6 Replies Latest reply: Aug 9, 2011 4:12 PM by igmackenzie
larryd517 Level 1 Level 1 (135 points)

When I click Private Browsing, every site I visit with Safari is logged out. When I turn off Private Browsing, I'm automatically logged in. This was not the behavior in Snow Leopard or earlier (I don't believe).

This was driving me crazy...it's a real PITA to log in to every site (including the ones where you're not autosaving the password, such as financial sites, etc.)

I reported it to apple.com/feedback but thougth I'd share it with the community in case anyone else noticed it.


MacBook, Mac OS X (10.7)
  • baltwo Level 9 Level 9 (62,195 points)

    If you want to report this issue to Apple's engineering, send a bug report or an enhancement request via its Bug Reporter system. To do this, register as an Apple Developer—it's free and available for all Mac users and gets you a look at some development software. Since you already have an Apple username/ID, use that. Once a member, go to Apple BugReporter and file your bug report or enhancement request. You'll get a response and a follow-up number; thus, starting a dialog with engineering

  • igmackenzie Level 4 Level 4 (2,285 points)

    Surely that is correct behaviour in Private mode.  There is no history or storing of (or reference to) cookies, so Safari will not keep you logged in to any site.

    Maybe I'm misunderstanding the issue, though.

  • larryd517 Level 1 Level 1 (135 points)

    Before Lion, Safari Private Browsing would visit websites without the need to log in (or so I believe was the case). Now, the second you go Private, you have to type in user name and password at every site. Once you turn off Private, you are automatically logged in.

    Not sure how effective a security/privacy feature this is, if, by design, you can log into any site just by turning off Private. I can understand Safari not saving anything created while in Private, but this issue revolves around Safari accessing saved information.

  • igmackenzie Level 4 Level 4 (2,285 points)

    Sorry, but I still think Safari is behaving correctly.

    Try this

    1) Switch on Private Browsing, go to a site that you know you are logged into normally.  You will see that you are not logged in now.  Exit Private Mode, go back to the site and you will find that you are still logged in.  Logical.

    2) Switch on Private Browsing, go to a site that you know for sure you are not logged into normally, login and select 'keep me logged in', then exit Private Mode, go back to the site, and you will find that you are not logged in. Logical.

  • larryd517 Level 1 Level 1 (135 points)

    #2 makes sense and that fits with what Private Browsing should be all about

     

    #1 doesn't make sense, since, as soon as you exit Private Browsing a user that has access to the machine, has access to all sites. Accordingly, it's not very private nor secure. In fact the big PRIVATE that appears on the address bar invites curiousity and folks will click it, and be offered the option to end Private Browsing (and thus, full access).

     

    In any event, pre Lion, I believe, this wasn't the case...although now I'm not sure, as I only used Private Browsing a few times.

  • igmackenzie Level 4 Level 4 (2,285 points)

    1) is normal browser behaviour.  Nothing to do with Private at all.  If you save cookies and select options like 'keep me logged in', then of course anyone who uses your browser will also be logged in! Private is irrelevant there.