6 ms·Ideally you should not be able to determine whether a username is valid without authenticating.by gre345t34 2y agoIdeally you should not be able to determine whether a username is valid without authenticating.