30
Is it fine if a website says "email already in use" before you hit submit? (lemmy.world)
submitted 1 year ago by to c/cybersecurity@sh.itjust.works
42 comments fedilink hide all child comments
 

I remember hearing before that it's a sign they are storing your info unencrypted but I never checked.

Is this true? I was logging into a .gov website and noticed it does that.

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 1 year ago (1 child)

User registration will still need to check if the email is the user id (which I loathe).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 1 year ago

    Not necessarily. If it's implemented well, the frontend will just show a "success" message, but the email sent will be different. This way, the owner of the account will know if they already have an account, or if it wasn't them, that someone else tried to use their email. Meanwhile the bad actor won't know anything new.

  • permalink
  • fedilink
  • source
  • parent