[BUG] Strange Behavior in Phishing Resistant Search

[colonelpanic8]

Perhaps this is by design, but it seems that when Phishing Resistant search is enabled, I must type the FULL name of the password before I get any results:

Is this by design? My intuition about what this option would provide is e.g. disallowing different capitalization or substituted characters.

[msfjarvis]

This is by design as of now and unlikely to change in the immediate future. We can revisit this closer to the 2.0 release, after our larger refactors are out of the way.

[msfjarvis]

Closing as part of issue tracker cleanup.