3 ms·
If I did want to close that hole, is there anything more clever than just having a username that isn't an email address, and allow more than one account to use
by jffry 5y ago
If I did want to close that hole, is there anything more clever than just having a username that isn't an email address, and allow more than one account to use the same email address?
- ghusbands 5y agoI don't think people in general want to remember a username for every site.
- isbvhodnvemrwvn 5y agoJust return the usual "please confirm registration by clicking a link in the email" - in the e-mail you just notify the email owner that someone tried to create a new account while another account was already registered for this e-mail. This does not disclose anything to anyone other than the owner of the e-mail.