From b0e7e207627625567c39138d9d9abd9b66b8213c Mon Sep 17 00:00:00 2001
From: Andrei Pavel <andrei@isc.org>
Date: Fri, 2 Apr 2021 15:08:11 +0300
Subject: [PATCH] [#1675] add ChangeLog entry

---
 ChangeLog | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index 0db4cf9b27..86f99d26a9 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,17 @@
+1885.	[func]		andrei
+	kea-admin is now able to interactively ask for a password if no
+	parameter follows the -p or the --password parameters. This
+	requires the user to give it as the last parameter. If another
+	option starting with dash follows, that would be taken as the
+	actual password, would not be processed as it should have been
+	and all your parameters will be offset by one. Checking if the
+	word that follows starts with dash is also not possible because
+	that would not allow for passwords starting with dash. Feedback
+	of the password to the terminal is cut off to prevent
+	over-the-shoulder snooping and other social engineering
+	techniques.
+	(Gitlab #1675)
+
 1884.	[doc]		fdupont
 	HTTP_CONNECTION_HANDSHAKE_FAILED log message got a
 	description.