Comment 1 for bug 1945218

Revision history for this message
William Grant (wgrant) wrote :

It's definitely unacceptable from a security perspective to provide an oracle for whether a charm exists that you're not allowed to see. We could potentially justify distinguishing reserved and already registered, but it would need some thinking around security.