Comment by endianswap

14 years ago

Why is that harder to fix? Many sites handle it properly:

"If there was an account associated with that email address we have emailed it with instructions."

Since people log in with a username, not an email, they may not know which email address they associated with the account. Especially if they used a one-off to avoid spam. Personally, I prefer systems that do a reset to email after you provide a username, since usernames are often public / verifiable anyways.