[wp-trac] [WordPress Trac] #31787: Password Reset Form Information Disclosure (was: Password Reset Form Improved Error Messages)

[WordPress Trac]

#31787: Password Reset Form Information Disclosure
--------------------------+------------------------------
 Reporter:  mrtortai      |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------
Changes (by MikeHansenMe):

 * keywords:  has-patch needs-testing =>
 * component:  Login and Registration => General


Comment:

 There have been a number of related tickets. Ultimately the decision has
 always been the username is not a secret.

 @ipstenu has a great article on it as well as Otto's comment.

 http://halfelf.org/2014/username-secret/

--
Ticket URL: <https://core.trac.wordpress.org/ticket/31787#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform