Fix documentation for roundup-server about the 'host' parameter as

[roundup.git] / CHANGES.txt

diff --git a/CHANGES.txt b/CHANGES.txt
index 4fe82cfcbe7d2afca9d908983087054c920534d1..3a071349d5f1762e9dddd241c7be30f0eccd6525 100644 (file)
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -84,6 +84,18 @@ Fixed:
   is "yes" so if you don't want that passwords are auto-migrated to a
   more secure password scheme on user login, set this to "no" before
   running your tracker(s) after the upgrade.
+- Add new config-option 'password_pbkdf2_default_rounds' in 'main'
+  section to configure the default parameter for new password
+  generation. Set this to a higher value on faster systems which want
+  more security. Thanks to Eli Collins for implementing this (see
+  issue2550688).
+- Fix documentation for roundup-server about the 'host' parameter as
+  suggested in issue2550693, fixes the first part of this issue. Make
+  'localhost' the new default for this parameter, note the upgrading
+  documentation of changed behaviour.  We also deprecate the empty host
+  parameter for binding to all interfaces now (still left in for
+  compatibility). Thanks to Toni Mueller for providing the first version
+  of this patch and discussing implementations.
 
 2010-10-08 1.4.16 (r4541)