Why doesn’t Windows re-try the password as if CAPS LOCK were turned off? (blogs.harvard.edu)

Isn't this nontrivial if your keyboard is in any locale that's not US English?

Really? Harvard asking this question???

It should be obvious to anyone that the device requesting authentication should never help those requesting authentication. The client (or user) should never be trusted.

Ever.

Ever.

My keyboard automatically tries both if it sees asterisks...