13 Jan
2008
13 Jan
'08
9:16 a.m.
Eg. when a customer says: "Hey, I want my username to be "foo", and my email to be "bar@domain.com". :)
I encourage that on my servers. It's just one more layer of defense
against password guessing zombies; beats me if it makes any difference.
I don't want to give them the userid for free just because they saw the
email address on some spam list.