Re: SVLUG and SSL?

Quoting Kevin Dankwardt ([email protected]):

> I just got this message via the SVLUG Meetup page.
> ------------------
> 
> Jeb Baxley
> <https://meet.meetup.com/wf/click?upn=pEEcc35imY7Cq0tG1vyTt-2FfH78ByS2gkGngEP9PHfkyBo-2BE3zw4yDyauqyiadkkcgOhO6sjYzvj63q1I82CTghD-2F4-2BemwY2Y51LIshEX7LVxt4OY6xh7oMo2JkDWkVGVIZR-2B3kOfVB-2BDij5RwukZOcbEbjrsdRxY8EOcu64yXBxqcqtTjuLFl45G2kCa0WtS_jnM7mWtP1mibjtTBvWAY6ikMwKpf9dXtYLtmmVrfzlv-2BdIAX-2Fxve8l1XLGRy0GYMVj52yAj3wEoCmgYG4vUi9QodeBHHTpYPGRjb49OvsQIX0KBlnwHMuQE32dLoZuJIYEbMfD79utaOV5HgvUPH2UHKTuylIVxFCPNdDi6DvT7Nl8e3mNF73lEmi7IaTK3EXKABDf7OwFdv6Qsr-2Bva2tc2YgXplkYyz3iKQ5xZ3whM-3D>
> Hey,
> 
> I went over to the SVLUG website and attempted to sign up for the email
> newsletter. However, the site isn't using SSL.
> 
> Can you confirm that it's not suppose to?

There is no significant benefit, so we don't.

As to subscription passwords, that is a GNU Mailman Frequently Asked
Question:  The answer about why there is no signficant security benefit 
is that subscribers are specifically warned at signup not to use a
valuable password, since this password may be mailed to you in plain
text, a hypothetical misappropriator of your subscription credentials
(which really isn't likely) wouldn't be able to do much with it, and
most things he/she could attempt would trigger confirmation from Mailman
to you of that request.

(Subscribers nontheless bothered by the idea of the monthly plaintext
password-reminder mails can switch that feature off for their
subscriptions, inside the subscriber options screen.)

Nothing else on either of the SVLUG Web sites requires Web-mediated
authentication.  It's all public data.

> I'm very interested in getting involved and leveling up!

Always glad to welcome new participation!

-- Rick Moen
   for the SVLUG listadmin & webmaster team