[NTLK] [ADMIN] Monthly Mailing List Membership Reminders

[Sylvain Pilet]

Grant, 

Like everyone else, I say, safety is a priority.

But I'd like to understand, you're saying that the Mailman Listing sends our list password in plain text, right?
But what password are you talking about? We do not need a password to register on the list. I think I'm missing something. 


Sylvain Pilet

http://message-pad.net
http://messagepad.no-ip.org:3680 [NPDS Tracker]

> Le 4 juin 2019 à 18:22, Grant Hutchinson <grant at splorp.com> a écrit :
> 
> Hello everyone.
> 
> A list member brought to my attention that the monthly membership reminder emails that you receive contain your list password in plain text. While I’ve known about this “feature” of the Mailman mailing list software for years, I’ve never paid much attention to the potential security risks it presents.
> 
> I have a couple of options to address this issue:
> 
> 1) Determine whether the reminder email template can be modified to remove the password information
> 
> ... or ...
> 
> 2) Disable the monthly reminders altogether
> 
> The simplest solution is to disable the reminders, but I wanted to check with you folks first.
> 
> Do any of you find value in these reminder emails?
> 
> 
> g.
> 
> ----------------------------------------------------------------------
> 
> Grant Hutchinson
> NewtonTalk List Dad & Interweb Custodian