Email enumeration vulnerability on "Password Reset" dialogue

[sam (Sam Saffron)]

@Ed_S

This does seem to me like Discourse defaults should follow best practices - like almost every other site does.

I like this feedback, but I would prefer if was backed up a bit more data:

What do the following sites do?

• Facebook
• Twitter
• Amazon
• Reddit
• Yahoo