Ian Kelly added the comment: Yes, the email used to reset was a secondary address. I don't think an unregistered email could be used to start the reset process since it wouldn't identify the account.
_______________________________________________________ PSF Meta Tracker <metatrac...@psf.upfronthosting.co.za> <http://psf.upfronthosting.co.za/roundup/meta/issue564> _______________________________________________________ _______________________________________________ Tracker-discuss mailing list Tracker-discuss@python.org https://mail.python.org/mailman/listinfo/tracker-discuss