Comment 21 for bug 615239

Even it is annoying to be asked for a password when not editing the network settings.
Just ignoring the failure and searching for another network is the best thing to do when an access point cannot be connected to.

Probably we could have some settings where we could choose to do the following things
 - Pin the client to a specific host (MAC address where authentication was done with and not allowing to connect to different hardware, probably a good idea for most home networks, but will most likely not work with networks like FreeWifi)
 - Prefer the authenticated host when available, but do not pin the client to it.
 - Connect to any host with matching SSID with no preference.
This setting is necessary for each authenticated SSID, so that we can configure our home network different from the FreeWifi used everywhere else.

Pinning the client to an access point could improve security a bit as it prevents connecting to another (malicious?) access point with the same SSID without user's knowledge.
A malicious access point could be used for man-in-the-middle attacks.

But it is not impossible to clone an access point with the same MAC, but those cloned access points would then probably interfere with each other if they are near to each other.
That would make a man-in-the-middle attack a bit harder.