Selenium IDE Privacy Policy

[Nader]

Hi there, I'm trying to find out what the privacy policy is for the Selenium IDE Chrome and Firefox Extensions because they say they can read and modify data on the sites I visit, which I understand is necessary to interact with the site.  However if there is sensitive information on those sites I want to test, I'm wondering how that information is protected, if at all, and who has access to read it, and if it's being stored somewhere I don't know about.  I just want to make sure that if I use those Browser extensions, that there is no possibility of the data getting exposed in any way. Please let me know. 

I will also be posting this question on the github forum: 

https://github.com/SeleniumHQ/selenium-ide/issues 

Thanks,

Nader

[ddlionx]

Jim Evans replied to a post similar to this recently so I will copy and paste his reply for convenience. 

By default all communication between the Selenium code and the browser happens on the local machine. It is possible to configure it to run on other machines on the same network, or ship the execution off to a could provider, but that would take specific, conscious choices on your part. I will point out, in the interest of full disclosure, that communication happens via HTTP, even on the local machine, so you’ll need to be aware of that for security purposes, but again, by default, that communication is limited to localhost only.

--
You received this message because you are subscribed to the Google Groups "Selenium Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-users/bce72e09-a43b-41e2-b72a-93538625b130n%40googlegroups.com.

[Nader]

Hi There,

Thanks for your reply! I did see that thread as well.  I don't think it really answers my question though. and there was also an unanswered reply at the bottom of that thread asking the same question as me, specifically referring to the Selenium IDE:

"Thanks for your response about this topic. I'm wondering if this also applies to the Selenium IDE project as well..."

My concern is that when chrome or firefox, upon installing the Selenium IDE extension, say the extension can "read and change all your data on the websites you visit", I need to know what data specifically they are referring to, if that data is stored anywhere outside of my local machine, and if so, if someone (like a developer of the extension for example) has access to see that data. In my research about this topic, that was not explicitly clarified one way or another.

Please let me know if you have any further information on the topic.

Thanks very much.

Nader

[ddlionx]

Well, the Selenium IDE interacting with the page (e.g. clicking links) is interacting with the page and changing the data independent of your actions. That's what it's referring to. Without considering other replies, that's undeniably what's being. referred to.  The Selenium IDE is not inconsistent with how Selenium words in terms of "phoning home" to an external party.

To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-users/800211f8-5e32-4baa-9050-77b2e1c29bc1n%40googlegroups.com.

[Nader]

Hello,

Absolutely, that makes sense why they would add that access requirement there for the IDE.  However, could I get you to please clarify your last sentence regarding "phoning home" to an external party? I'm not sure if I understand what you're saying there.

Thanks!

[ddlionx]

You asked if the information is being sent anywhere. I am saying ‘no, Selenium doesn’t phone home’. 

To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-users/31553ab1-d5a0-4e79-8e5a-3d2b495582cdn%40googlegroups.com.