Github user greenman18523 commented on the issue:
https://github.com/apache/commons-lang/pull/335
> it will not always obviously which minMasked to use.
I am sorry, but I didn't understand this, can you please further elaborate?
``minMasked`` will be one, and it will be the absolute minimum of characters
that will be masked.
Examples are SMS messages, e.g. some messages are short and contain one
time passwords, or links to re-assign password. Such messages are generally
very short, and since they have sensitive data, nothing can be logged, thus we
have a minMasked value of 30. Also addresses, depending on how the user inputs
it, this can be very few characters (usually just the street and the street
number) or many (city, prefecture, country, etc), so when we print part of the
address we need at least the first 15 characters to be masked.
The use cases might be specific, but considering this is part of a generic
API the method should be flexible, in order to cover a wide variety of usecases.
---
