[PATCH] privacy: on password reset, don't tell strangers if email is valid or not

2015-05-16 Thread Andrew Shadura
# HG changeset patch # User Andrew Shadura and...@shadura.me # Date 1431787037 -7200 # Sat May 16 16:37:17 2015 +0200 # Node ID 388a6eada55925cb55cd2368e47a6115d833b4c1 # Parent 93de511e84fe940786acf468789a77daed83a461 privacy: on password reset, don't tell strangers if email is valid or not

Re: [PATCH] privacy: on password reset, don't tell strangers if email is valid or not

2015-05-16 Thread Andrew Shadura
Hello, On Sat, 16 May 2015 16:37:42 +0200 Andrew Shadura and...@shadura.me wrote: Password reset form might be used to check if users with specific email addresses have accounts in the system by requesting their password to be reset. It's probably not a good idea to give this sort of