185
I just made my first Lemmy PR
(github.com)
This is a most excellent place for technology news and articles.
There should be an error, but it shouldn't say whether it was the email or password that was wrong.
Fair point!
~~An attacker would still know the account exists, and they would know the password did not match.~~
~~Or you're assuring them that specific password is used by some account, just not this one. Which is even worse.~~
Read the comment you're responding to, again. Nothing about their suggestion leads to either of these scenarios.
Right, I misread "shouldn't" for "should".