X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/5b459737a50d83ff94490d86d1b9a4438d4b50a1..a0ec06a90bb1c37055513f185089dedbd2c07cfa:/debian/changelog?ds=sidebyside

diff --git a/debian/changelog b/debian/changelog
index 30b358ca6..14ef4e71b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,12 +1,23 @@
 ikiwiki (3.20150330) UNRELEASED; urgency=medium
 
+  [ Joey Hess ]
+  * New emailauth plugin lets users log in, without any registration,
+    by simply clicking on a link in an email.
   * Re-remove google from openid selector; their openid provider is
     gone for good.
-  * When openid and passwordauth are the only enabled auth plugins,
-    make the openid selector display "Password" instead of "Other",
-    so users are more likely to click on it when they don't have an openid.
+  * Make the openid selector display "Password" instead of "Other"
+    when appropriate, so users are more likely to click on it when
+    they don't have an openid.
   * Converted openid-selector into a more generic loginselector helper
     plugin.
+  * passwordauth: Don't allow registering accounts that look like openids.
+  * Make cgiurl output deterministic, not hash order. Closes: #785738
+    Thanks, Daniel Kahn Gillmor
+
+  [ Simon McVittie ]
+  * Do not enable emailauth by default, to avoid surprises on httpauth-only
+    sites. Enable it by default in openid instead, since it is essentially
+    a replacement for OpenIDs.
 
  -- Joey Hess <id@joeyh.name>  Tue, 28 Apr 2015 12:24:08 -0400