News for hackers. Stuff that matters.

A comment on Authentication Cheat Sheet. Parent comment

Re:Authentication Cheat Sheet by jdbernard on Monday February 02, 2015 @01:19PM (#8985689)
That works for sign-up, but not for the far more common case of sign-in.
[ Parent | on HN ]
Re:Authentication Cheat Sheet by birdmanjeremy on Monday February 02, 2015 @02:07PM (#8986073)
If you use this approach, the idea is then that you use a generic login failure message. This prevents leaking of any account information, but provides a different (poorer, IMO) user experience.
[ Parent | on HN ]