Account enumeration on verification-less signup
Is there a way to prevent account enumeration on signup page if access to the site is not requiring you to verify your email?
The scenario is as following:
Sign up for a site with email+password, but allow to use the site immediately. Some… Continue reading Account enumeration on verification-less signup