KeeFox 1.2.5b1 released
Version 1.2.5 is nearly ready to be released so beta testers will soon be upgraded to this new version with a few small but important bug fixes:
- A fix for Thunderbird 25
- A couple of bug fixes that caused some passwords to not save to KeePass
- Danish, French, Korean, Portuguese and Russian languages created / updated (some not complete yet)
- Fix for intermittent failed KeePass shutdown on Mono (Mac/Linux)
- Some other small changes
Big changes in KeeFox 1.3 and 1.4
Some big changes are coming to Firefox at the end of this year and we’ll be watching them as they develop over the coming month or two so that KeeFox 1.4 can continue to work beyond 2013. It could be an exciting opportunity to make some improvements to KeeFox so within a couple of months I’ll be posting a bit more detail about the changes and what we can all do to help.
Before then, I’ll be releasing KeeFox 1.3 which contains just as many large changes but they are fairly invisible by comparison to the ones expected in KeeFox 1.4.
KeeFox 1.3 contains support for keyboard shortcuts, context (right-click) menus and some big changes to the way that KeeFox communicates with KeePass.
It’s the last change that I’m most interested in at the moment because of the security and usability implications of changes to this part of KeeFox.
If you’re not technical, feel free to stop reading now but if you think you might be able to contribute a little time to review the current KeeFox 1.3 alpha release that would be very helpful.
I’ve posted a draft of the new communications protocol to the manual so please start by taking a read through that. There’re also a few non-technical pages available in draft:
Version 1.3.0a1 is currently available as an experimental build on the 1.3dev github branch. Known issues include:
- Several incomplete features make the build unsafe
- Installing this build will probably prevent future versions of KeeFox (including later builds of 1.3.0) from working unless you delete your Firefox profile or make complex manual preference changes
- Only tested on Firefox 25 on Windows 7
- No UI to manage authorised clients
- No UI to change the keyboard shortcuts
- Context menu implementation incomplete
- First-time user experience not working
- Connection establishment logic needs more work and maybe better notifications to users, especially for the edge cases when things go wrong
If you come across anything else that’s a problem with either the specification or implementation of the new KeePassRPC protocol please raise an issue on github so we can discuss it further - note that no-one should be using this alpha version for sensitive data at the moment so don’t worry about responsible disclosure, etc.
I’ll add a few of the above issues to github so if someone else wants to help out by implementing some of them, please keep an eye on the issues listed in the KeeFox 1.3 milestone.
Over the next month or two I’ll be working on the remaining issues above, improving the documentation and generally working towards getting a beta version ready for the Autumn.
Please test out the latest version of KeeFox. There are over ten thousand lines of changed code so I’d like to get some wider testing from willing users before pushing the new version onto the development (beta) channel.
The biggest changes are to form detection and form field matching which I’m sure you can guess is a fairly large chunk of the add-on. The main benefits are:
Improved form matching and filling
- Forms no longer need a password field (this feature is powered by a set of white/black lists which will need refinement during this testing phase and with each future KeeFox release)
- More multi-page logins work correctly
- New types of form field dealt with correctly (HTML5)
- The old “monitor each web page for new forms” feature has been upgraded to allow monitoring on only specific websites (if you used the old feature, you shouldn’t notice any difference but I strongly recommend disabling this on all sites except for the occasional specific ones on which it is needed)
Per-site configuration allows:
- You to quickly get many previously problematic websites working correctly
- KeeFox developers to make most popular websites work for all users in a future KeeFox version (to start with we’ve got Microsoft live.com working which is the most frequently mentioned “problem site” at the moment)
New localisation module reduces work for developers and translators (hopefully leading to new translators joining the team) and allows the “useful tips” and similar messages to be translated for the first time. In the next few days I’ll publish a separate article with more background and detail about this work.
A new configuration storage system within each KeePass entry is required to enable some of the features above so once you upgrade your KeePass database you won’t be able to go back unless you revert to an earlier backup. The upgrade process has been tested (and applied to my personal database with 500 entries) but there may be edge cases I’m not aware of so please pay attention to the warning about making a backup.
Please use the new manual on the github wiki and the github issues tracker instead of the Sourceforge Trac manual and ticket tracker that we’ve been using for several years. I’ll announce this change to everyone in due course but it’ll be simpler if I wait until version 1.2 is released because it contains some information that doesn’t apply to KeeFox 1.1.
If you have a backup of your existing database (if not, why not?) please download version 1.2.0a1 from the usual experimental XPI location.
Please post on the forum if you have any problems or comments (and make sure to state that you’re using v1.2.0a1).
The recently released KeeFox 1.1.2 contains dozens of new and improved features and a few important bug fixes, the highlights are below.
- Multiple database support. Seamlessly work with more than one KeePass database thanks to these improvements:
- Logins from all open (unlocked) databases are matched (and automatically filled / submitted depending on your configuration)
- Logins from all open databases are listed on the Logins toolbar button
- A new login can be saved into any open database
- Changing databases from within KeeFox is now reliable and predictable
- Improved form matching accuracy: when KeeFox knows how many form fields to expect for an entry it will now use that information to help select the correct form on a page
- Instant edit feature added: Review and edit every entry that KeeFox saves (disabled by default).
- Memory leak fixed: This will be a big improvement for heavy Firefox users who do not shutdown Firefox for days or weeks at a time
- Added option to require more accurate URL matching for specific entries (previously possible through a hidden KeePass “advanced string”)
- Thunderbird support (in beta testing)
- Improvements to setup instructions, especially for non-admin users and Mono (Mac & Linux) users
- First-run improvements (e.g. automatic save of your first KeePass database and a link to information about importing existing passwords)
You should get 1.1.2 pushed to you automatically unless you have disabled Firefox add-on automatic updates. You can manually install it from the main Add-on page.
Known limitation: Newsgroup authentication prompts in Thunderbird do not work with KeeFox.
Apple Mac support: The immaturity of the Mono platform that Mac users require to make KeePass work is keeping KeeFox Mac support in beta testing for the time being. You can install the development version if you’d like to give it a try (it seems to mostly work if you have some patience and know what you’re doing)
Known bug: Shortly after the release of 1.1.2 I learnt that users who enable the Firefox master password (for use by other add-ons, Firefox Sync, etc.) sometimes experience problems entering the master password when prompted before Firefox has completely started. I have put a fix into version 1.1.3 which you can download from here: https://github.com/luckyrat/KeeFox/blob/ … d79301bb/XPI-package/latest.xpi?raw=true.
1.1.3 is an experimental build - although it has very few changes since the well-tested 1.1.2 it has not been thoroughly tested itself so I advise only installing it if you need to. I’ll monitor its usage and consider releasing it as an official tested version if it looks like enough people are affected by this bug.
I’ll be starting work on version 1.2 in a few weeks time so do let me know through the support forum if you find any bugs that I should be working on for that release. In the mean time, enjoy version 1.1!
0.8.19 was released shortly after 0.8.17 in order to fix a few bugs that crept into version 0.8.17. All experimental users should upgrade to this new version.
Sorry for the inconvenience.
Another release candidate candidate is available for download.
This version now works with websites that have HTML5 form elements, has more accurate HTTP Auth dialog entry matching, handles protected password fields correctly and works with password database paths that contain Unicode characters.
Please could all experimental version users upgrade to this version because:
1) You might not know if your form filling accuracy is affected by some of the bugs fixed in 0.8.17
2) It will help give me confidence to release 0.8.17 to the wider group of KeeFox users and stop having to write “release candidate candidate”
Please let me know what you think of the latest version!