Comment 7 for bug 411559

cool, I saw your comment upstream as well, I see your point of view :-)

I just thought that it might be difficult to distinguish between a failed authentication and an incorrect password, however if they can do it, all the better :-)