https://bugzilla.wikimedia.org/show_bug.cgi?id=46010
Matthew Flaschen <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED CC| |[email protected] Resolution|--- |WONTFIX --- Comment #1 from Matthew Flaschen <[email protected]> --- This is deliberate. The code explicitly says: "// Don't reveal whether or not an email address is in use" https://gerrit.wikimedia.org/r/gitweb?p=mediawiki/core.git;a=blob;f=includes/specials/SpecialPasswordReset.php;h=90b0ac802cf11272be43a2b6c72631aca12b1023;hb=HEAD#l185 Many sites work like this (including on password reset screens). Some sites don't reveal either the list of usernames or the list of emails. On MW, the list of users is public (Special:ListUsers), but email addresses are private. We should not make it possible for someone to check whether an email is registered. -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug. You are watching all bug changes. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
