Re: password aging

["Paul M. Cardon" <pmarc () cmg fcnbd com>]

"H. Morrow Long" thus spake unto me:
> I'm presuming that you should store hashes of previous passwords,
> and not store the actual passwords themselves...              - Morrow

That would seem obvious except that a one-way hash will leave you with the  
ability to check for prior use of exactly the same password but not use of a  
closely similar password.

-paul