The pdfsign.jsp sample PDF signing web page on the demo web page of public web does not have auto completion turned off. This means the risk that the password gets stored in the web browser.
Unfortunately we can not set the attribute "autocomplete=off" as the web page is "XHTML 1.0 Strict".
- After (or as part of) the planned improvement of the public web pages
DSS-1634and if we then changed doctype we could add this attribute.
- For more details see the attachment to the linked support ticket.
- Note: We might need JSF 2.2 to be able to "passthrough" the autocomplete attribute.