Fix the -s flag to heimdal-history (alternate quality checker)

[kerberos/krb5-strength.git] / NEWS

diff --git a/NEWS b/NEWS
index a41835989edf9698b8c52a32798822e6bd2db3d6..3acab414c3c8bc917f6821087bc5de5c42a11025 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -10,10 +10,10 @@ krb5-strength 3.0 (unreleased)
     mechanism.)  This program has more extensive Perl module dependencies
     than the other programs in this distribution.
 
-    When checking a password against a CDB dictionary, the dictionary will
-    be checked for all printable ASCII passwords within edit distance one,
-    in addition to checking the password with first and last characters,
-    first two characters, and last two characters removed.
+    A new configuration option, minimum_different, can be set to require
+    that passwords contain at least that many unique characters.  This can
+    be used to reject long strings of identical characters or short
+    patterns, which may pass other checks but still be too easy to guess.
 
 krb5-strength 2.2 (2013-12-16)