5 ms·

I believe revealing whether or not an email address has an account is also considered a security issue.

• pornel 15y ago
  Validation on registration form reveals this already.
  • subsection1h 15y ago
    Well-designed registration forms should not reveal this. Our registration forms provide the error "Email address or password is incorrect. Please try again." Further, forgotten password forms, etc. should also not reveal this.
    • huhtenberg 15y ago
      Pssst... the registration form, not the login form. As in sorry, we cannot create you an account as your selected username has already been taken.
      • itsnotvalid 15y ago
        as a matter of fact, they don't strictly tell you who the person is with an email address... they just tell you that the email address is taken.