diff --git a/NEWS.md b/NEWS.md
index cab397c..02bf209 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -3,6 +3,8 @@
 - Add support for the [Azurite](https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azurite) and [Azure SDK](https://docs.microsoft.com/en-us/azure/storage/common/storage-use-emulator) storage emulators. To connect to the endpoint, use the service-specific functions `blob_endpoint` and `queue_endpoint` (the latter from the AzureQstor package), passing the full URL including the account name: `blob_endpoint("http://127.0.0.1:10000/myaccount", key="mykey")`. The warning about an unrecognised endpoint can be ignored. See the linked pages for full details on how to authenticate to the emulator.
 
   Note that the Azure SDK emulator is no longer being actively developed; it's recommended to use Azurite.
+- Add a 10-second fuzz factor to the default starting datetime for a generated SAS, to allow for differences in clocks.
+- More fixes for the directory handling of `list_blobs()`.
 
 # AzureStor 3.2.3
 
diff --git a/R/sas.R b/R/sas.R
index bf71b0e..3eb8a71 100644
--- a/R/sas.R
+++ b/R/sas.R
@@ -272,7 +272,7 @@ get_user_delegation_sas.default <- function(account, key, resource, start=NULL,
 make_sas_dates <- function(start=NULL, expiry=NULL)
 {
     if(is.null(start))
-        start <- Sys.time()
+        start <- Sys.time() - 10
     else if(!inherits(start, "POSIXt"))
         start <- as.POSIXct(start, origin="1970-01-01")