You're right - I thought you were referring to an authentication system's resistance against username enumeration (rather than the actual username). Thanks for

You're right - I thought you were referring to an authentication system's resistance against username enumeration (rather than the actual username). Thanks for clarifying!