Roboform and Pale Moon, a love story

[Booty Coon]

This subject was started in another Topic from Browser support https://forum.palemoon.org/viewtopic.php?f=3&t=27922.

Since I'm very happy with the portable version of Pale Moon, I decided to moved this part of the discussion here where it belongs.

It is up to the developers of extensions to make sure their extensions are compatible with the browser they extend, not the other way around.

Do they seriously expect their extension written for version 7(!!) from probably 10 or 12 years ago to continue working perfectly?

Same answer for both:

Yes, i agree, its up to the dev to adjust, but they said their new version 9 is not compatible because the way PM is written or constructed or something along that line.

Here is their answer mail:

You wrote (2022/03/06 12:55 pm EST):
Hello, I would like to know if the current version of roboform is compatible with PaleMoon?

Thank you

===

Olivia replied (2022/03/06 01:13 pm EST):
Hello Joe,

RoboForm can only attach to Palemoon version 27.0.3 or earlier. In later Palemoon versions the way the extension is handled was changed, and RoboForm cannot attach to the browser. Please see this disclaimer from Palemoon developers:
viewtopic.php?f=1&t=26657

PaleMoon does not seem to support the latest RoboForm add-on for Firefox re-designed to keep in pace with Firefox so this is not a RoboForm issue.

I'm very intrigue by this dilemma where both sides redirect to each other. I'm hoping we can find an answer to this, so that addon can be compatible again.

P.S.
I'm not working for them lol I just really like that addon very much.

[somdcomputerguy]

Well a 7 is a different than a 27 (probably just a typo) but still, a company should make (or keep) their add-on compatible with a browser, not the other way around.

[andyprough]

I don't think we have any of those browser-addon cloud password managers for Pale Moon. I don't see any when I search the Extensions page. There are some very nice desktop alternatives though, with more and better features than the browser addon ones. Bitwarden makes an exceptional free cloud-based password manager, with desktop versions for all the major OS's. It can apparently import the passwords from Roboform as well.

[Kris_88]

I'm hoping we can find an answer to this, so that addon can be compatible again.

You can try RoboForm Lite 3.9.2
https://www.roboform.com/dist/roboform-firefox.xpi
with PM 29.1.1
https://archive.palemoon.org/palemoon/29.x/29.1.1/

Probably this add-on will be compatible with the next PM release. May be...
viewtopic.php?f=5&t=27682

[Booty Coon]

I don't think we have any of those browser-addon cloud password managers for Pale Moon. I don't see any when I search the Extensions page. There are some very nice desktop alternatives though, with more and better features than the browser addon ones. Bitwarden makes an exceptional free cloud-based password manager, with desktop versions for all the major OS's. It can apparently import the passwords from Roboform as well.

I may try that one, thanks for the suggestion, very much appreciated.

I'm hoping we can find an answer to this, so that addon can be compatible again.

You can try RoboForm Lite 3.9.2
https://www.roboform.com/dist/roboform-firefox.xpi
with PM 29.1.1
https://archive.palemoon.org/palemoon/29.x/29.1.1/

Probably this add-on will be compatible with the next PM release. May be...
viewtopic.php?f=5&t=27682

I'll look into it, thanks.

Whoa! tough read, that brick wall

[Moonchild]

I don't think we have any of those browser-addon cloud password managers for Pale Moon.

Reasons for that:

• Cloud providers don't want to invest in writing/maintaining extensions for what they perceive as "niche" browsers. From a business perspective, this is understandable.
• Nobody else can write these extensions because they are service extensions for the cloud service, and will have to be maintained by the provider. In addition, most service providers don't allow third party clients to their service.
• We have a capable and secure password manager inside Pale Moon. Just set your master password and it will keep everything encrypted securely ("military-grade" encryption as cloud providers often advertise with)
• For sharing these passwords among different installations of Pale Moon I operate and maintain Pale Moon Sync, a client for which is built right into the browser as well. And if you don't like that idea (even though it's a perfectly secure way to use cloud storage; only you will have the key to recover data) then you can use any of the available alternative server solutions to store the data privately on a server you own.

All of this combined makes it unlikely to see cloud password manager extensions being written for Pale Moon explicitly.

[andyprough]

[*]We have a capable and secure password manager inside Pale Moon. Just set your master password and it will keep everything encrypted securely ("military-grade" encryption as cloud providers often advertise with)
[*]For sharing these passwords among different installations of Pale Moon I operate and maintain Pale Moon Sync, a client for which is built right into the browser as well. And if you don't like that idea (even though it's a perfectly secure way to use cloud storage; only you will have the key to recover data) then you can use any of the available alternative server solutions to store the data privately on a server you own.
[/list]

I did not realize Pale Moon had such advanced password management built in, I will do some experimenting with it.

When I check sync status or try to set up sync, I get a 403 error.

[Moonchild]

When I check sync status or try to set up sync, I get a 403 error.

That's because:

Code: Select all

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.74 Safari/537.36

[andyprough]

That's because:

Code: Select all

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.74 Safari/537.36

Of course, should have thought of that. Working fine with regular user agent.

[Trippynet]

I migrated from Roboform to Sticky Password a few years back - primarily because Sticky Password explicitly supports Pale Moon and the extension works absolutely fine on current versions of PM. Might also be worth a look?

The only limitation is that it only supports the 32bit version of Pale Moon at this time.

[Booty Coon]

We have a capable and secure password manager inside Pale Moon. Just set your master password and it will keep everything encrypted securely ("military-grade" encryption as cloud providers often advertise with)

Like we discussed in the other topic, my problem is I can only use the portable version of pm for the passwords to be saved. I want to be able to use install version and for that to happens i need a password manager.

I migrated from Roboform to Sticky Password a few years back - primarily because Sticky Password explicitly supports Pale Moon and the extension works absolutely fine on current versions of PM. Might also be worth a look?

The only limitation is that it only supports the 32bit version of Pale Moon at this time.

I'm on 64bit but thanks.

[Kris_88]

Like we discussed in the other topic, my problem is I can only use the portable version of pm for the passwords to be saved.

You can probably use the full version, but you should move the profile folder, as we discussed earlier. Have you tried it?

[Moonchild]

Like we discussed in the other topic, my problem is I can only use the portable version of pm for the passwords to be saved.

As others have already indicated, this is probably due to an incorrect update strategy or corrupt profile (or both) and you should try with a fresh profile.
Portable or not, though, that has 0 to do with this. it in no way diminishes the value or capabilities of the inbuilt password manager in the browser.

[moonbat]

Of course, should have thought of that. Working fine with regular user agent.

This is why you don't ever tamper with the global user agent. Pale Moon supports site specific overrides for individual websites as a workaround when they rely on UA sniffing to claim that it is an outdated browser. If you need to change it for specific sites, you can also do it more easily with the extensions PermissionsPlus (in my signature) or Sasuga.

[andyprough]

This is why you don't ever tamper with the global user agent. Pale Moon supports site specific overrides for individual websites as a workaround when they rely on UA sniffing to claim that it is an outdated browser. If you need to change it for specific sites, you can also do it more easily with the extensions PermissionsPlus (in my signature) or Sasuga.

Interesting argument but I will always tinker with UA's for reasons that you've not touched on but which Moonchild's earlier response lays bare. Besides, we have access to global UA extensions in the Pale Moon Addons - they are there for using. I do use and like Sasuga on some of my systems, but I need to try out your PermissionsPlus - I was not aware of it but it has some very useful options beyond just UA's.

[Moonchild]

Interesting argument but I will always tinker with UA's for reasons that you've not touched on but which Moonchild's earlier response lays bare.

The problem with lying about your client software in the user agent globally (obviously for perceived "privacy" reasons, along with the plethora of used proxies) is that you may run into issues like that which could have sent everyone on a wild and wasteful goose chase if it weren't for the fact that I had an intuition this might be the case (and I do block service access from clients that are obviously not valid for use of the Sync service). Blanket-overriding your user agent for all domains isn't useful and should not be done, or you should be aware of the potential pitfalls (which you clearly weren't before I pointed it out) doing so and not assume the browser is at fault before you revert any "privacy-enhancing" measures to double-check it's not because of that practice.

[andyprough]

you should be aware of the potential pitfalls (which you clearly weren't before I pointed it out)

I'm well aware, I can't even add Pale Moon extensions with UA spoofing turned on. I should not have even asked the question - I failed to stop and think before I posted it. My apologies.

Hope I have not distracted too much from helping the OP to find a suitable password management solution. Seems like several excellent ones have been offered up here, especially Pale Moon's built-in master password, it's a very useful thread for future readers.

[Moonchild]

I'm well aware, I can't even add Pale Moon extensions with UA spoofing turned on.

This is why you don't ever tamper with the global user agent. Pale Moon supports site specific overrides for individual websites as a workaround when they rely on UA sniffing to claim that it is an outdated browser. If you need to change it for specific sites, you can also do it more easily with the extensions PermissionsPlus (in my signature) or Sasuga.

[somdcomputerguy]

Seems like several excellent ones have been offered up here, especially Pale Moon's built-in master password, it's a very useful thread for future readers.

I was reluctant to throw in my 2 cents about the password manager I have used for more than 25 years as this thread was seemingly only to be about Roboform and Pale Moon. However since a couple other ones have been mentioned, I'm jumping in with yet another alternative. I have used KeePass for quite a while and I'm very happy with it.

KeePass Password Safe

[andyprough]

I have used KeePass for quite a while and I'm very happy with it.

KeePass Password Safe

The ability to generate OTP's is a big advantage for KeePass over some of the cloud services, which either don't handle OTP's or charge money for it.