Re: [ADMIN] Monthly Mailing List Membership Reminders
Rusty Miles <[email protected]>
| Newsgroups | gmane.comp.systems.newton.newtontalk |
|---|---|
| Message-ID | <DM2PR09MB0542548F54D3D3EAA8B64C7F99160@DM2PR09MB0542.namprd09.prod.outlook.com> |
I think the passwords are just used to log into the list if one needs to change their configuration. I can do without the reminder, thanks Grant. -Rusty -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Sylvain Pilet Sent: Tuesday, June 4, 2019 5:44 PM To: Newton Liste Newton Talk US <[email protected]> Subject: Re: [NTLK] [ADMIN] Monthly Mailing List Membership Reminders *** This is an EXTERNAL email. Please exercise caution. DO NOT open attachments or click links from unknown senders or unexpected email. - STS-Security*** Grant, Like everyone else, I say, safety is a priority. But I'd like to understand, you're saying that the Mailman Listing sends our list password in plain text, right? But what password are you talking about? We do not need a password to register on the list. I think I'm missing something. Sylvain Pilet http://message-pad.net http://messagepad.no-ip.org:3680 [NPDS Tracker] > Le 4 juin 2019 à 18:22, Grant Hutchinson <[email protected]> a écrit : > > Hello everyone. > > A list member brought to my attention that the monthly membership reminder emails that you receive contain your list password in plain text. While I’ve known about this “feature” of the Mailman mailing list software for years, I’ve never paid much attention to the potential security risks it presents. > > I have a couple of options to address this issue: > > 1) Determine whether the reminder email template can be modified to remove the password information > > ... or ... > > 2) Disable the monthly reminders altogether > > The simplest solution is to disable the reminders, but I wanted to check with you folks first. > > Do any of you find value in these reminder emails? > > > g. > > ---------------------------------------------------------------------- > > Grant Hutchinson > NewtonTalk List Dad & Interweb Custodian ---------------------------------------------------------------------- http://newtontalk.net/ http://twitter.com/newtontalk ---------------------------------------------------------------------- http://newtontalk.net/ http://twitter.com/newtontalk