Password recovery is stupid: should ask for EITHER username OR email, not both

[teo8976@…]

There are two kinds of decent "forgot your password" procedures:

• those which ask you to enter your email
• those which let choose whether to enter the username or the email

Asking for both is STUPID (as would be asking for the username without the option to use the email instead), as one may have forgotten the username.

It's pathetic that in 2016 we still see sites that ask for both username and email for password reset.