비밀번호 재설정 시 이메일 정보 유출 금지

[awesomerobot (Kris)]

This is not a bug. We have a site setting called hide email address taken that prevents it.

There are also rate-limits on sign in so it’s not particularly easy to brute force large numbers of email addresses.