Timeline for What's the reason behind not notifying users that they entered a wrong email when they recover their password?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 4, 2017 at 13:25 | comment | added | Nils Q. | In addition to what @maaartinus wrote, it might be sufficient to know whether the account exist at all, e.g., whether your husbands email address is registered at e.g. pornhub. So this is not just a security concern but also a privacy problem | |
| Aug 3, 2017 at 11:45 | comment | added | maaartinus | This doesn't make much sense... if I want to get any access, I first try to register with a few emails until I find some already existing. Then I try tons of common passwords. As the latter part is much more demanding, going through the former doesn't count. | |
| Aug 3, 2017 at 11:37 | history | answered | uliwitness | CC BY-SA 3.0 |