D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Request mailman configuration change;

 

On Sun, Feb 01, 2015 at 08:28:15PM +0000, bad apple wrote:
> On 01/02/15 20:07, Brad Rogers wrote:
> > when the
> > internet was a) much smaller and b) a far more genteel place than it is
> > now.
> 
> Good times. Sadly missed :[

Blame Microsoft for getting hundreds of millions of people online.

I've long stopped getting annoyed by Mailman's monthly reminders, but
they show a very bad security practice and are pretty pointless too: you
don't really need your password to do anything to your Mailman
subscription and you don't need a monthly email to be reminded you're
still subscribed.

The reminders can easily be turned off list-wide in Mailman's admin
interface. That doesn't stop the passwords from being stored in
clear text, but it does stop Mailman from bragging about its insecure
password storage policy every month.

Martijn.


-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq