X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/cfb2c22906f41d4a4dd1c3404e8e430a35c1cd41..dc6357d9c66f5365a0310c2b5effd815dabe2d69:/debian/changelog?ds=sidebyside

diff --git a/debian/changelog b/debian/changelog
index 45801567f..14ef4e71b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,6 @@
 ikiwiki (3.20150330) UNRELEASED; urgency=medium
 
+  [ Joey Hess ]
   * New emailauth plugin lets users log in, without any registration,
     by simply clicking on a link in an email.
   * Re-remove google from openid selector; their openid provider is
@@ -9,6 +10,14 @@ ikiwiki (3.20150330) UNRELEASED; urgency=medium
     they don't have an openid.
   * Converted openid-selector into a more generic loginselector helper
     plugin.
+  * passwordauth: Don't allow registering accounts that look like openids.
+  * Make cgiurl output deterministic, not hash order. Closes: #785738
+    Thanks, Daniel Kahn Gillmor
+
+  [ Simon McVittie ]
+  * Do not enable emailauth by default, to avoid surprises on httpauth-only
+    sites. Enable it by default in openid instead, since it is essentially
+    a replacement for OpenIDs.
 
  -- Joey Hess <id@joeyh.name>  Tue, 28 Apr 2015 12:24:08 -0400