[edited title—didn’t mean to sound provocative.]
Hi, I'm wondering if this is expected behavior: I use Little Snitch and when I access Apple's Passwords, Passwords connects to domains of other saved passwords. Now, I just accessed Passwords to find my login info for a news site--and Password has tried to make connections to a bunch of other domains. Once I saw this was happening, I'd made a rule in Little Snitch denying these connections. The other day, Passwords connected to domains and sometimes subdomains for every single one of my saved Password sites.
So, every time Passwords (and previously Hide my Email) is accessed, domains to saved password sites get pinged. These domain connection requests are to the sites, not to Apple (I've allowed the latter).
Pre-Sequoia, I'd noticed similar behavior with Hide My Mail: if a site didn't work with autofill and I did a manual search for an email and password, I'd get multiple Little Snitch requests to connect to domains saved in Hide My Mail (and Keychain, I think*). Because I'd set Little Snitch to Ask to allow connections, I'd have to click through each individual request until the searched name appeared. (I gritted my teeth and put this on a mental backburner.)
A screenshot of connection requests made when I looked up a single site:
The pathname, according to Little Snitch:
Any ideas about this behavior? Is there a functional need to let sites know the user is still active? 1Password, for instance, certainly doesn't do this.
(*I'm not remembering if this happened with Keychain and/or Hide my Email. One or both of the two pre-Sequoia.)
Hi, I'm wondering if this is expected behavior: I use Little Snitch and when I access Apple's Passwords, Passwords connects to domains of other saved passwords. Now, I just accessed Passwords to find my login info for a news site--and Password has tried to make connections to a bunch of other domains. Once I saw this was happening, I'd made a rule in Little Snitch denying these connections. The other day, Passwords connected to domains and sometimes subdomains for every single one of my saved Password sites.
So, every time Passwords (and previously Hide my Email) is accessed, domains to saved password sites get pinged. These domain connection requests are to the sites, not to Apple (I've allowed the latter).
Pre-Sequoia, I'd noticed similar behavior with Hide My Mail: if a site didn't work with autofill and I did a manual search for an email and password, I'd get multiple Little Snitch requests to connect to domains saved in Hide My Mail (and Keychain, I think*). Because I'd set Little Snitch to Ask to allow connections, I'd have to click through each individual request until the searched name appeared. (I gritted my teeth and put this on a mental backburner.)
A screenshot of connection requests made when I looked up a single site:
The pathname, according to Little Snitch:
Any ideas about this behavior? Is there a functional need to let sites know the user is still active? 1Password, for instance, certainly doesn't do this.
(*I'm not remembering if this happened with Keychain and/or Hide my Email. One or both of the two pre-Sequoia.)
Last edited:
