3 ms·
IMO trying to stop user enumeration is a lost cause. People with many email addresses and no password manager still need a way to figure out which email/usernam
by NavinF 5y ago
IMO trying to stop user enumeration is a lost cause. People with many email addresses and no password manager still need a way to figure out which email/username they used on your site. If they can't enumerate themselves, you end up with bad retention or lots of support tickets.
- thrwyoilarticle 5y agoProtecting PII is more important than your user retention.
- NavinF 5y agoToo bad, roughly 0% of websites attempt to stop user enumeration. The ones that try usually fail because they don't do it consistently, but hey the ~0% of their user base that is composed of HNers appreciate the effort. Also, Santa Claus isn't real. When it rains, it pours.