Most likely because credit card forms are very often served in iframes. 1Passwor... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		pushrax on Aug 11, 2021 \| parent \| context \| favorite \| on: 1Password 8 will be subscription only and won’t su... Most likely because credit card forms are very often served in iframes. 1Password fills iframes too (though maybe only for cards, not sure).

mfer on Aug 11, 2021 [–]

1Password fills iframes based on their domain rather than the parents. If you have an entry in 1Password it will use the value for the domain of the iframe.

I’ve gone so far as to test this.

In my opinion this is the right security model

pushrax on Aug 12, 2021 | [–]

That definitely makes sense for logins.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact