Comment

Comment by gamzer

If the goal is to log in new users immediately after registration, is it possible to not leak whether a username is already registered?

If [email protected] is not registered and I register it, I will be logged in (even if it does not belong to me).

If [email protected] is already registered, the site can neither let me register it nor log me in.

parent gamzer 4 years ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton