[wp-trac] [WordPress Trac] #9568: Allow users to log in using their email address

[WordPress Trac]

#9568: Allow users to log in using their email address
---------------------------------------------------+-----------------------
 Reporter:  Denis-de-Bernardy                      |       Owner:
     Type:  feature request                        |      Status:  assigned
 Priority:  normal                                 |   Milestone:  4.5
Component:  Users                                  |     Version:  2.8
 Severity:  normal                                 |  Resolution:
 Keywords:  has-patch has-unit-tests dev-feedback  |     Focuses:  docs
---------------------------------------------------+-----------------------

Comment (by johnbillion):

 Important consideration: the error message reported when a valid email
 address is entered can lead to information disclosure. It allows an
 attacker to determine which email addresses are in use on the site. (The
 same issue does not apply to usernames as usernames are not considered
 private information.)

 '''This change should not be implemented until it has been cleared by the
 WordPress Security Team.'''

--
Ticket URL: <https://core.trac.wordpress.org/ticket/9568#comment:82>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform