We're going through various audits for PCI right now. Our auditor insisted that we need to add checks for reuse of recent passwords. However, I've heard that t

We're going through various audits for PCI right now. Our auditor insisted that we need to add checks for reuse of recent passwords. However, I've heard that the process varies widely depending on who your auditors are. Some are apparently very permissive, but we got the other end of the spectrum.