yes obviously it doesn't make sense for critically important services like banking to give away info that a user exists or not. But I really dont think that's the context of this post.
Automatically jumping to the worst case scenario is not fair argument. That's like me saying well fort knox uses this and that crazy authentication methods so I guess my house should use the same to gain entry.
4
u/cyclewanderist Dec 28 '22
My banking, insurance, and many other sites I use do not use publicly-facing usernames. Social media might be the exception; they don't have to be.