89799969 commented on PR #4475:
URL: 
https://github.com/apache/rocketmq-dashboard/pull/4475#issuecomment-5809231803

   Reopened after the 7-day stale auto-close. The change is still needed: 
unknown usernames still skip the dummy PBKDF2 burn, so login latency can 
distinguish existing accounts.
   
   Issue #4159 remains open and no competing PR covers this residual timing 
path. Branch is unchanged and still targets `master`. Ready for re-review.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to