Extend the safe mode in a new semi-safe mode to abort after N account lockouts. Essentially, don't abort after the first lockout (probably not our fault), but instead after some user supplied number (probably our fault).
This is primarily for password sprays, but couldn't hurt to have globally.
Extend the
safe
mode in a newsemi-safe
mode to abort after N account lockouts. Essentially, don't abort after the first lockout (probably not our fault), but instead after some user supplied number (probably our fault).This is primarily for password sprays, but couldn't hurt to have globally.