4 ms·

I'd prefer to not create brute force vulnerability that leaks the site's list of user email addresses to an attacker.

• tromp 4y ago
  As the article points out, this leaks it no more than trying to register an email address.
  • croes 4y ago
    Which can be prevented by sending an confirmation email at a signup, no matter if a new account or an existing one.