Discourse Meta
Password reset confirm message should discourage social engineering
Feature
JammyDodger
Closed
August 4, 2023, 8:03am
11
Closed in favour of
Email enumeration vulnerability on "Password Reset" dialogue
show post in topic
Related topics
Topic
Replies
Views
Activity
Received password reset email though I didn’t request one?
Support
15
4557
November 28, 2023
Password reset email leads to "Oops! That page doesn’t exist or is private."
Support
3
644
September 30, 2021
Is it possible to hash the email database?
Feature
23
1185
October 10, 2018
Do not leak emails on password reset
Support
4
606
January 14, 2021
Hiding "e-mail taken" on sign-up by default
Announcements
6
162
December 22, 2024