[NTLK] [ADMIN] Monthly Mailing List Membership Reminders

[Rusty Miles]

I think the passwords are just used to log into the list if one needs to change their configuration.

I can do without the reminder, thanks Grant.

-Rusty

-----Original Message-----
From: newtontalk-bounces at newtontalk.net [mailto:newtontalk-bounces at newtontalk.net] On Behalf Of Sylvain Pilet
Sent: Tuesday, June 4, 2019 5:44 PM
To: Newton Liste Newton Talk US <newtontalk at newtontalk.net>
Subject: Re: [NTLK] [ADMIN] Monthly Mailing List Membership Reminders


*** This is an EXTERNAL email. Please exercise caution. DO NOT open attachments or click links from unknown senders or unexpected email. - STS-Security***


Grant,

Like everyone else, I say, safety is a priority.

But I'd like to understand, you're saying that the Mailman Listing sends our list password in plain text, right?
But what password are you talking about? We do not need a password to register on the list. I think I'm missing something.


Sylvain Pilet

http://message-pad.net
http://messagepad.no-ip.org:3680 [NPDS Tracker]

> Le 4 juin 2019 à 18:22, Grant Hutchinson <grant at splorp.com> a écrit :
>
> Hello everyone.
>
> A list member brought to my attention that the monthly membership reminder emails that you receive contain your list password in plain text. While I’ve known about this “feature” of the Mailman mailing list software for years, I’ve never paid much attention to the potential security risks it presents.
>
> I have a couple of options to address this issue:
>
> 1) Determine whether the reminder email template can be modified to remove the password information
>
> ... or ...
>
> 2) Disable the monthly reminders altogether
>
> The simplest solution is to disable the reminders, but I wanted to check with you folks first.
>
> Do any of you find value in these reminder emails?
>
>
> g.
>
> ----------------------------------------------------------------------
>
> Grant Hutchinson
> NewtonTalk List Dad & Interweb Custodian
----------------------------------------------------------------------

http://newtontalk.net/
http://twitter.com/newtontalk