Mailman Help

Kevin Cozens kevin-4dS5u2o1hCn3fQ9qLvQP4Q at public.gmane.org
Tue Aug 5 15:11:33 UTC 2014


On 14-08-04 01:22 PM, Myles Braithwaite wrote:
> On Mon, Aug 4, 2014 at 1:15 PM, Christopher Browne <cbbrowne-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org>
> wrote:
>> One thing to beware of (and if it's already solved, then great!!!) is
>> that Mailman has the habit of sending monthly notices to subscribers
>> that include a reminder of their list password.

That is one thing I really dislike about mailman based mailing lists. I'm
very surprised that no one has yet fixed that gaping security hole.

> One of the first things I did was disable the monthly password reminder
> on all the GTALUG mailing lists.

Thank you for disabling that feature.

> I don't want GTALUG on the Plain Text Offenders web site:
> <http://plaintextoffenders.com/>.

The one thing I noticed on that list is that people have reported sites that 
send plain text passwords when a person is going through the "forgot my 
password" feature.

-- 
Cheers!

Kevin.

http://www.ve3syb.ca/           |"Nerds make the shiny things that distract
Owner of Elecraft K2 #2172      | the mouth-breathers, and that's why we're
                                 | powerful!"
#include <disclaimer/favourite> |             --Chris Hardwick
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list