diff --git a/ChangeLog b/ChangeLog
index d8131a636..b0210abac 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,8 +1,14 @@
+2013-12-04 Richard Frith-Macdonald <rfm@gnu.org>
+
+	* Source/NSURLCredential.m: ([-isEqual:]) needs to take the password
+	and persistence into account, not just the username.
+
 2013-11-29 Riccardo Mottola <rm@gnu.org>
 
 	* Headers/ObjectiveC2/objc/runtime.h
 	* Headers/Foundation/NSObjCRuntime.h
-	Insert some kludge for PTR stuff on systems with fake C99 compatible headers.
+	Insert some kludge for PTR stuff on systems with fake C99
+	compatible headers.
 
 2013-11-26 Riccardo Mottola <rm@gnu.org>
 
diff --git a/Source/NSURLCredential.m b/Source/NSURLCredential.m
index 0dad0acec..f8fcbc1b7 100644
--- a/Source/NSURLCredential.m
+++ b/Source/NSURLCredential.m
@@ -132,7 +132,9 @@ typedef struct {
     {
       return NO;
     }
-  return [[(NSURLCredential*)other user] isEqualToString: this->user];
+  return [[(NSURLCredential*)other user] isEqualToString: this->user]
+    && [[(NSURLCredential*)other password] isEqualToString: this->password]
+    && [(NSURLCredential*)other persistence] == this->persistence;
 }
 
 - (NSString *) password