In #12 I thougth it would be okay to keep usernames case-sensitive.
However, for someone who does not use a password manager (aka everyone else) logging in with a case-sensitive username would be really annoying.
This is only needed in places where usernames are entered by a user. Users are always referred to by name and we don't need to sacrifice performance in all those places. Just be explicit about where username is case-insensitive and assume case-sensitivity by default.
In #12 I thougth it would be okay to keep usernames case-sensitive.
However, for someone who does not use a password manager (aka everyone else) logging in with a case-sensitive username would be really annoying.
This is only needed in places where usernames are entered by a user. Users are always referred to by name and we don't need to sacrifice performance in all those places. Just be explicit about where username is case-insensitive and assume case-sensitivity by default.