Thread:Project:Current issues/reset password page falsely states it sent a password, given blank username/reply (6)

Aha - I missed that it says either is ok. Thanks for clearing up my confusion! So the response can still be confusing, but I guess that even knowing whether the email sending script immediately responds with e.g. Domain Not Found" would leak some information about the view of the web from the wikipedia server.