Comment Comment by tuxxy The application doesn't know if the username you entered is actually yours or someone else's.You could provide the correct password to your account 'test', but not 'ttest'.The server just tells you to check both instead, it's more semantically correct and offers some security improvements with user enumeration. parent tuxxy 9 years ago
You could provide the correct password to your account 'test', but not 'ttest'.
The server just tells you to check both instead, it's more semantically correct and offers some security improvements with user enumeration.