Hi there

It seems it is possible to determine valid email addresses using the password recovery of CGP webmail. If you key in an account name that doesn’t exist you get an error “unknown user account” if you key in a valid account you get a different message “no password recovery email address has been specified”. Are these messages customisable?

Thanks

Ian