{"action":"created","issue":{"url":"https://api.github.com/repos/plataformatec/devise/issues/3540","labels_url":"https://api.github.com/repos/plataformatec/devise/issues/3540/labels{/name}","comments_url":"https://api.github.com/repos/plataformatec/devise/issues/3540/comments","events_url":"https://api.github.com/repos/plataformatec/devise/issues/3540/events","html_url":"https://github.com/plataformatec/devise/issues/3540","id":65159975,"number":3540,"title":"paranoid + registration","user":{"login":"ninja-","id":5637961,"avatar_url":"https://avatars.githubusercontent.com/u/5637961?v=3","gravatar_id":"","url":"https://api.github.com/users/ninja-","html_url":"https://github.com/ninja-","followers_url":"https://api.github.com/users/ninja-/followers","following_url":"https://api.github.com/users/ninja-/following{/other_user}","gists_url":"https://api.github.com/users/ninja-/gists{/gist_id}","starred_url":"https://api.github.com/users/ninja-/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ninja-/subscriptions","organizations_url":"https://api.github.com/users/ninja-/orgs","repos_url":"https://api.github.com/users/ninja-/repos","events_url":"https://api.github.com/users/ninja-/events{/privacy}","received_events_url":"https://api.github.com/users/ninja-/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-03-30T08:24:26Z","updated_at":"2015-04-17T13:23:24Z","closed_at":"2015-03-31T15:27:53Z","body":"Documentation says that paranoid doesn't affect registration.\r\nDoes it 'leak' emails? Does the registration form allow to check if email is already registered?\r\nAre there no 'you have been registered, if you wasn't registered before' kind of message?"},"comment":{"url":"https://api.github.com/repos/plataformatec/devise/issues/comments/93984955","html_url":"https://github.com/plataformatec/devise/issues/3540#issuecomment-93984955","issue_url":"https://api.github.com/repos/plataformatec/devise/issues/3540","id":93984955,"user":{"login":"monfresh","id":811150,"avatar_url":"https://avatars.githubusercontent.com/u/811150?v=3","gravatar_id":"","url":"https://api.github.com/users/monfresh","html_url":"https://github.com/monfresh","followers_url":"https://api.github.com/users/monfresh/followers","following_url":"https://api.github.com/users/monfresh/following{/other_user}","gists_url":"https://api.github.com/users/monfresh/gists{/gist_id}","starred_url":"https://api.github.com/users/monfresh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/monfresh/subscriptions","organizations_url":"https://api.github.com/users/monfresh/orgs","repos_url":"https://api.github.com/users/monfresh/repos","events_url":"https://api.github.com/users/monfresh/events{/privacy}","received_events_url":"https://api.github.com/users/monfresh/received_events","type":"User","site_admin":false},"created_at":"2015-04-17T13:23:24Z","updated_at":"2015-04-17T13:23:24Z","body":"Understood. Given that more and more people are concerned about security and privacy these days, I was just suggesting that perhaps Devise might want to take a \"secure and private by default\" stance and turn on paranoid mode by default, including compatibility with registerable.\r\n\r\nI suppose I could write up instructions in the Wiki or create a gem, but I thought it would benefit the community for Devise to do this by default. If I had to guess, I would think that most people would want paranoid mode on versus off."}}