06:53 se 

Add support for the remote query API. This obviates the need to download
the > 10 GB pawned password hash list, which requires nearly 20 GB after
decompression.

The API does not transfer the queried password or its full SHA1 hash to
the server, but only the first 5 characters of the hash. This allows to
retrieve the full password hashes that match that prefix (typically in the
order of 500) and then to check whether the password to test matches any
of the hashes returned.

Approved by:	antoine (implicit)

 

22:50 se 

Revert previous commit. The format of the passwort hash database files
has been changed and entries are no longer sorted.

PORTEPOCH is not incremented, since only a few minutes passed after the
commit of the revoked upate.

Approved by:    antoine (implicit)

 

22:10 se 

Update to use newly released database of pawned passwords (2.5 times the
number of passwords covered, compared to the previous version).

Approved by:	antoine (implicit)

 

20:46 se 

This script uses a downloaded copy of the pwned passwort hashes available
from https://haveibeenpwned.com/Passwords/ to allow passwords to be locally
checked, whether they are known to have been obtained in a data breach and
therefore should not be used.

Approved by:	Antoine (mentor)