so why is it more secure to have it open a save dialog in comparison to just ask download or not download

this is how it looks with the flag set to no but prompt on risky downloads on active

@leocg said in please bring back show-save-file-dialog-on-risky-download:

Executable files will trigger the save as dialog for you to choose where to save it. In this case, last used folder will be remembered by Windows.

and THIS is the problem, which wasnt there when this flag was still there (or even earlier, default)

but the way it works now is totally ugly, it saves the files somewhere were you last used that save dialog on instead of the folder you have preset for DLs, which is crazy. the other 2 big non-MS browsers (FF and chrome), and even IE, which had been doing this for half an eternity are doing it like that as well. they ask whether to save or not and dont pop up something that defaults to the last location where you for example saved a picture in.

also hadnt been this even standard behavior for a long time?

better than nothing, certainly, but my opinion is that if we are doing it we should do it right from the beginning.

also opera on phones should finally get the ability to work with encrypted sync data

well that might be true for those that do use 2FA on their mail acc but probably not many actually do that, also lets not forget that the email provider itself will also pose a weakness. if a big attacker gets the mail provider to cooperate (or there's a hole in their systems and someone can exploit that) you have a problem.

opening an app and typing a code or just pluggin in a nice USB stick a pressing a button on it isnt too hard for a high level security.

sorry for pushing this but I have a question. is there any reason why this was removed in the first place?

@sgunhouse said in Go to web address (new tab):

Try holding Ctrl.

at least add middle-click to the option.

email 2FA isnt real 2FA but basically just another password. the point of 2FA is that you have "something you possess" (your phone) and "something you know" (your password) and not 2 "something you know"-s

another nice way would be U2F though. it does need additional hardware (in form of basically a cheap special USB stick) , but it's MUCH more secure.

for example a piece of malware cant do a lot as it needs to be "actvated" by hardware interaction, like pressing a button, or touching a metal surface of the stick.

for quite a while by now I have noticed that the spellcheck will come back on after a while when I disabled it, but the context menu still marks the spellcheck as disabled.

okay. no problem.