Bug 504207

Summary: [OpenConnect] Explain "Store browser cookies in plain-text" and use a better wording
Product: [Plasma] plasmashell Reporter: postix <postix>
Component: Networking in generalAssignee: Plasma Bugs List <plasma-bugs-null>
Status: CONFIRMED ---    
Severity: wishlist CC: drf, jgrulich, jreznik, nate
Priority: NOR Keywords: usability
Version First Reported In: 6.3.5   
Target Milestone: 1.0   
Platform: Other   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description postix 2025-05-14 11:36:17 UTC
SUMMARY

When I intend to connect to a Cisco AnyConnect VPN via OpenConnect, the login window offers me to

[ ] Store browser cookies in plain-text

I've found out that the credentials are finally saved, when checking this option (additionally?) to [ ] Store Credentials.
However, this option sounds very ominous:

- I'm connecting to a VPN, why is there a "browser" involved or "browser cookies"?
- Do those cookies store information about the session? What do they contain?
- If the setting is unchecked, will it omit storing cookies at all _or_ instead store them in non-plain-text?
- If they are stored in plain-text, where and how can I delete the cookies? How long are they valid?
- Since password saving doesn't work w/o it, shouldn't this option be always set at least as long credentials are meant to be stored?

SOFTWARE/OS VERSIONS
Operating System: openSUSE Tumbleweed 20250512
KDE Plasma Version: 6.3.5
KDE Frameworks Version: 6.14.0
Graphics Platform: Wayland
Comment 1 postix 2025-05-14 11:51:22 UTC
> I've found out that the credentials are finally saved, when checking this option (additionally?) to [ ] Store Credentials.
Maybe this was just coincidence. For some reasons credentials (i.e. additionally the password!) are saved on Tumbleweed with these two options set, but not on Fedora 42 unfortunately.