3 ms·
The "register account" flow also allows for user enumeration, but you don't hear people complaining about that security hole.
by brilee 6y ago
The "register account" flow also allows for user enumeration, but you don't hear people complaining about that security hole.
- amenghra 6y agoRegistration, login, or password reset flows commonly leak directly or indirectly (eg via a timing channel) whether a user exists or not.