Discourse Meta
Password reset confirm message should discourage social engineering
Contribute
Feature
JammyDodger
gesloten
4 augustus 2023 om 08:03
11
Closed in favour of
Email enumeration vulnerability on "Password Reset" dialogue
bericht weergeven in topic
Gerelateerde topics
Topic
Antwoorden
Weergaven
Activiteit
Different password reset for wrong username/email
Feature
64
28438
4 oktober 2017
Email enumeration vulnerability on "Password Reset" dialogue
UX
19
4513
19 december 2024
Hiding "e-mail taken" on sign-up by default
Announcements
6
315
22 december 2024
Always allow username-based password reset
Feature
login
4
202
6 augustus 2026
Do not leak emails on password reset
Support
3
703
14 januari 2021