Discourse Meta
Password reset confirm message should discourage social engineering
Feature
JammyDodger
Closed
August 4, 2023, 8:03am
11
Closed in favour of
Email enumeration vulnerability on "Password Reset" dialogue
show post in topic
Related topics
Topic
Replies
Views
Activity
Different password reset for wrong username/email
Feature
65
27762
August 4, 2023
Email enumeration vulnerability on "Password Reset" dialogue
UX
19
3576
December 19, 2024
Hiding "e-mail taken" on sign-up by default
Announcements
6
183
December 22, 2024
Do not leak emails on password reset
Support
4
615
January 14, 2021
Received password reset email though I didn’t request one?
Support
15
5306
November 28, 2023